How two Python and PHP dependencies, ctx and Phpass, became malware that stole secrets and credentials

A security expert's analysis of the malicious code added to ctx and Phpass, Python and PHP dependencies, that turned them into malware by sending environment variables and credentials to a third party attacker.

credentials ctx dependencies malware php python secrets