https://checkmarx.com/blog/users-of-telegram-aws-and-alibaba-cloud-targeted-in-latest-supply-chain-attack/, https://blog.phylum.io/cloud-provider-credentials-targeted-in-new-pypi-malware-campaign/