Injective SDK on npm infected with cryptocurrency wallet stealer