OceanLotus APT Compromises FireAnt MetaKit in Supply-Chain Attack on Stock Investors