MetaMask third-party provider was hacked, exposing email addresses