Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

One of the packages in question is "ctx," a Python module available in the PyPi repository. The other involves "phpass," a PHP package that's been forked on GitHub to distribute a rogue update.