Cybernews researchers uncovered numerous OpenWebUI instances that were silently running malware.