Researcher hijacks popular Packagist PHP packages to get a job