Malicious PyPI package with 37,000 downloads steals AWS keys

https://www.bleepingcomputer.com/news/security/malicious-pypi-package-with-37-000-downloads-steals-aws-keys/