Hackers are exploiting Steam Workshop to hide malicious code inside community-made desktop themes for Wallpaper Engine, putting users at risk of account theft.