CVE-2026-45793: Anatomy of a 14-Hour PHP Supply-Chain Near-Miss (github.com)

After yesterday's composer situation, I felt the need to write down my perspective on how this came to be as the vulnerability reporter.