However, newer versions emerged starting May 15th into this week and contained malicious code: Python's ctx library and a fork of PHP's phpass have been compromised. 3 million users combined.