Being careful where you download from isn't always enough. SourceForge, the hosting service for phpMyAdmin, has disclosed that the official phpMyAdmin 3.5.2.2 distribution was Trojanised some time last weekend.