In the latest software supply chain attack, the official PHP ... on their git.php.net server. The threat actors had signed off on these commits as if these were made by known PHP developers ...

In context: PHP is an open-source scripting language web developers embed in HTML to ... attackers uploaded two malware payloads to the PHP git server, one would have created a backdoor to PHP ...