CVE-2026-45793: Anatomy of a 14-Hour PHP Supply-Chain Near-Miss

After yesterday's composer situation, I felt the need to write down my perspective on how this came to be as the vulnerability reporter.