Cybersecurity researchers have found malicious npm and PyPI packages targeting Solana wallets.The npm packages steal Solana wallet private keys and exfiltrate them via Gmail's SMTP.Some npm packages drain wallet contents and masquerade as legitimate Solana development tools.A destructive 'kill switch' functionality was found in some npm packages, deleting files on trigger.