Securing Developer Tools: A New Supply Chain Attack on PHP

https://blog.sonarsource.com/securing-developer-tools-a-new-supply-chain-attack-on-php/

…