https://orbitbrain.com/blog/critical-packagist-vulnerability-opened-door-for-php-supply-chain-attack/