Poisoned Python and PHP packages purloin passwords for AWS access

More supply chain trouble -this time with clear examples so you can learn how to spot this stuff yourself.