Compromised SourceForge mirror distributes backdoored phpMyAdmin package