The GitVenom campaign targets developers—and once downloaded, can be used to deceive victims into transferring crypto.