swap.gs

argument injection in composer, leading to takover of packagist.org (on sonarsource.com)