Hacker backdoors popular JavaScript library to steal Bitcoin funds