Additionally, the malicious commit was made in the name of PHP creator, Rasmus Lerdorf. But, that is hardly surprising as with source code version ... to the PHP project will now need to be ...