MSI Net, Inc. & mCloudServ

Researchers discover that a popular Python library “ctx” and PHP package “phpass” have been compromised to steal developers’ AWS keys and credentials (Ax Sharma/BleepingComputer)

Ax Sharma / BleepingComputer:
Researchers discover that a popular Python library “ctx” and PHP package “phpass” have been compromised to steal developers’ AWS keys and credentials  —  PyPI module ‘ctx’ that gets downloaded over 20,000 times a week has been compromised in a software supply chain attack …