security PHP's Git server hacked to add backdoors to PHP source code

[Future Sensors]

In the latest software supply chain attack, the official PHP Git repository was hacked and the code base tampered with.

Yesterday, two malicious commits were pushed to the php-src Git repository maintained by the PHP team on their git.php.net server.

Read more:

https://www.bleepingcomputer.com/ne...r-hacked-to-add-backdoors-to-php-source-code/

 

[karamakate]

It's pretty annoying. But technically, it's not the kind of attack that will affect existing or potential users.

Nevertheless, considering the critical importance of PHP in terms of usage rate, they should have been much more careful to protect its reputation.