Microsoft's cybersecurity division has issued a warning regarding a new malware campaign that targets cryptocurrency investors by hiding malicious code within widely used public npm open-source packages.