The security researcher who found the card stealing malware said hackers still have access to Nutribullet's infrastructure.