PHP blames supply chain securi... Note