A malicious PyPI package with 37,000 downloads has stolen AWS keys.Hackers are using ZIP file concatenation technique to evade detection.Cybercriminals are spreading the Remcos RAT malware using an Excel exploit.Hackers are hiding malicious code in macOS extended file attributes.