Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
  • greyscaleAEnglish
    1·
    14 days ago

    Half the internet runs on PHP bro. It pays a lot of rent and mortgages.

    The toolchain is less hellish than JS for sure.

    Its a pragmatic choice and its very easy to disregard you and opinions when its indistinguishable from 2005 skiddy talk.