PHP community sidesteps its third supply chain attack in three years

Third time lucky! (The first two times were lucky, too, luckily.)