Hackers use Ethereum smart contracts to conceal malware in code libraries