The latest attack from the self-replicating, npm-package poisoning worm can also steal credentials and secrets from AWS, ...