update composer, reported potential hacked account to oauth2-server-httpfoundation-bridge owner