Malicious PyPI package with 37,000 downloads steals AWS keysbleepingcomputer.com10 pointssandwichsphinx2 years ago