Storia in 2 fonti

Laravel Lang packages hijacked to deploy credential-stealing malware

A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through Composer packages.

Raccontata da

thehackernews.com

bleepingcomputer.com

Confronto fonti

2 prospettive sulla stessa storia

AI · summaries

bleepingcomputer.comStai leggendo1 g fa

Laravel Lang packages hijacked to deploy credential-stealing malware

originale

thehackernews.com1 g fa

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

Laravel-Lang compromise tagged 700+ versions on May 22–23, 2026, triggering PHP stealers that exfiltrate credentials.

Leggi questa versione → originale

Timeline cronologica

sabato 23 maggio 2026·thehackernews.com
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
Laravel-Lang compromise tagged 700+ versions on May 22–23, 2026, triggering PHP stealers that exfiltrate credentials.
sabato 23 maggio 2026·bleepingcomputer.com
Laravel Lang packages hijacked to deploy credential-stealing malware
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub…