PHP Pear site hacked https://theadminzone.com/ams/someon...nd-replaced-the-official-package-manager.877/ you server could be compromised.