Developing3 d agoMedia

Laravel Lang packages hijacked to deploy credential-stealing malware

A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages. [...]

Source
BleepingComputer
Trust
media · 60/100
Published
5/23/2026, 8:48:23 PM
Fetched
5/23/2026, 11:03:45 PM
Categories
cybersecurity
Open original source / advisory ↗