https://nypressnews.com/news/technology/researchers-discover-that-a-popular-python-library-ctx-and-php-package-phpass-have-been-compromised-to-steal-developers-aws-keys-and-credentials-ax-sharma-bleepingcomput/