Yesterday it came out that composer was downloading random code under certain circumstances and it appears today they released an update to fix this. To get the latest version run:
composer self-update
Great work composer team. This is such an important project for the PHP community that I would hate for it to get tarnished.