PHP Packagist supply chain poisoned by hacker “looking for a job”

We’ve written about PHP’s Packagist ecosystem before. Like PyPI for Pythonistas, Gems for Ruby fans, NPM for JavaScript programmers, or LuaRocks for Luaphiles, Packagist is a repository where community contributors can publish details of PHP packages they’ve created.

Read full article on Naked Security

 


Date:

Categorie(s):