What the PHP2Shell rumors got wrong, from inside the PHP security team (daubois.dev)

AI;DR very much an over-detailed dump of events without a good filter on the meaningful errors