Someone broke into @twilio's unsecured AWS S3 bucket and modified their libraries: https://www.theregister.com/2020/07/21/twilio_sdk_code_injection/