Hackers have exploited a critical flaw in infrastructure management tool Salt and, in one case planted crypto mining software.