[wlug] Re: Git.PHP.net Not Compromised in Supply Chain Attack, but User Database Leak Possible