Another Supply Chain Compromise according to ars TECHNICA| The PEAR PHP Package manager was compromised earlier this week. They discovered it was creating a reverse shell to: 104.131.154.154.