Twilio SDK hit by malicious code attack