NPM package targeting crypto wallets uses new language to evade detection