Comment by djitz

I’ve noticed quite a jump in PHP composer package spam recently, too. A lot of just ever so slightly renamed popular packages. A couple even had quite a few stars on their repo.