Just when everyone was looking at PHP2Shell , cloud hosting provider Railway got compromised. Railway detected anomalous activity on systems that store customer environment variables, obtaining decrypted contents (API keys, database/registry credentials, etc.)
commit f1be409