A newly disclosed security flaw in Composer, the widely used dependency manager for PHP, could allow a malicious or ...