Supply chain flaws in PHP package manager PEAR lay undiscovered for 15 yearsportswigger.net2 pointsfeross4 years ago