An OAuth feature is being abused in the wild to drop malware to people's computers.