The PHP project has been forced to move its operations from its own git server to the Microsoft-owned software code repository GitHub after two malicious commits were discovered in the php-srx ...

In the latest software supply chain attack, the official PHP Git repository was hacked and the code base tampered with. Yesterday, two malicious commits were pushed to the php-src Git repository ...

Unknown attackers compromised the official PHP Git server and planted a backdoor in the source code of the programming language.

The official PHP Git server has been compromised in a potential attempt to plant malware in the code base of the PHP project.

Two malicious changes were made to the development branch of the upcoming PHP v8.1 in an attempt to add a backdoor to any website that runs this tainted version of the popular web development ...

The PHP project maintains its repositories on its own git infrastructure. Over the weekend, someone pushed malicious commits that may have allowed hackers to attack websites that use the PHP ...