Stalkerware firm gets scooped by SQL-slinging security snoop