Republican donor site malware skimmed credit cards for six months