
The cross- ecosystem attack that shook Packagist: when PHP and Node allow back doors in CI
A recent coordinated attack on the supply chain has committed eight packages published in Packagist, introducing malicious code designed to download and run a Linux binary hosted …







