Security researchers this week identified two corrupt Python and PHP packages ... developers' AWS secret keys. phpass is an open source password hashing framework used in PHP applications.