Command injection flaw in PHP Composer allowed supply-chain attacks

The command injection vulnerability was discovered by researchers from SonarSource who warn that it flaw could have been potentially exploited to conduct a supply-chain attack.