Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages