Malicious NPM and PyPI Packages Pose as Dev Tools to Steal Wallet Credentials