The latest attack from the self-replicating npm-package poisoning worm can also steal credentials and secrets from AWS, ...