Google Apps Script vulnerability could have opened the door for malware