A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...