AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown