Malicious web3-parser NPM package targets crypto & web3 projects