Tag

installer-compromise

Safeguard articles tagged "installer-compromise" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Attacks

The Six-Month PEAR go-pear.phar Installer Compromise

How a single tampered PEAR go-pear.phar installer sat undetected on pear.php.net for months, what it could do, and what the PHP ecosystem learned about supply chain trust.

Nov 19, 20257 min read