A cryptojacking campaign called Commando Cat is exploiting exposed APIs