https://www.techradar.com/pro/security/aws-keys-stolen-by-malicious-pypi-package-with-thousands-of-downloads