Laravel Lang packages hijacked to deploy credential-stealing malware
Over Security - Cybersecurity news aggregator [Unofficial]
May 23, 2026
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages.
Discussion in the ATmosphere