The Department of Homeland Security has ordered US civilian federal agencies to remove DeepSeek products from their IT systems and stop buying them, under a 2018 supply chain security law.