But, that is hardly surprising as with source code version control systems like Git, it is possible to sign-off a commit as coming from anybody else [1, 2] locally and then upload the spoofed ...

Unknown attackers compromised the official PHP Git server and planted a backdoor in the source code of the programming language.

Hackers backdoor PHP source code after breaching internal git server Code gave code-execution powers to anyone who knew the secret password: "zerodium." ...