maintainer-impersonation

The PHP Source Code Git Server Backdoor Compromise of 2021

In 2021, attackers breached PHP's git server and pushed a backdoor under forged commits from top maintainers. Here's how the PHP git server compromise unfolded.