Skip to content
Threat Feed

Product

Laravel-Lang/Actions

1 brief RSS
high advisory

Laravel Lang Packages Hijacked in Credential-Stealing Supply Chain Attack

Attackers compromised Laravel Lang packages by rewriting GitHub tags, distributing a credential-stealing malware targeting cloud credentials, secrets, keys, browser data, and cryptocurrency wallets across Windows, Linux, and macOS systems.

laravel-lang/lang +3 supply-chain-attack credential-theft infostealer composer php github
2r 4t 1i