Ethereum and Solana developers were targeted by five malicious npm packages that steal private keys and send them to the attacker.