dYdX has been targeted by bad actors using malicious packages to empty its user wallets.