Malicious code added to PHP's source code repository included a reference to zero-day vulnerability broker Zerodium. An attacker added a backdoor to a code repository for the widely used, open-source ...

In the latest software supply chain attack, the official PHP Git repository was hacked and the code base tampered with. Yesterday, two malicious commits were pushed to the php-src Git repository ...