PSA, watch out for more sneaky spyware in software updates