Security researchers say the number of apps infected by the XcodeGhost malware is much higher than first thought.