Going forward, all PHP source code changes will be made directly to GitHub rather than to git.php.net. The malicious changes came to public attention no later than Sunday night by developers ...

Unknown attackers compromised the official PHP Git server and planted a backdoor in the source code of the programming language, potentially putting websites using the tainted code at risk of ...

Additionally, the malicious commit was made in the name of PHP creator, Rasmus Lerdorf. But, that is hardly surprising as with source code version control systems like Git, it is possible to sign ...