Crypto stolen by hackers in largest NPM attack