Supply Chain Incident

PHP source repository backdoor attempt

Attackers pushed malicious commits to the PHP source repository that would have introduced a backdoor if accepted into releases.

ConfidenceHigh
Evidence LevelVendor
Attack StageSource Compromise
Source Artifact DivergenceNo

Affected Packages

No structured records.

Affected Releases

No structured records.

Repositories

Organizations

Maintainers

No structured records.

Threat Actors

No structured records.

Campaigns

No structured records.

Build Systems

No structured records.

Distribution Channels

  • Source repository

Compromised Accounts

  • PHP git server commit identity

Connected Entities

  • PHP git server commit identity Compromised Account
  • PHP project Organization
  • php/php-src Repository
  • Source repository Distribution Channel

References