Malware

Laravel Lang packages compromised in supply chain attack to

May 23, 2026 1 min read 8 views
cybersecurity malware news
Attackers hijacked Laravel Lang packages on Composer by manipulating GitHub version tags to distribute a cross-platform credential stealer. The malware harvests cloud secrets, browser data, and tokens from Windows, macOS, and Linux systems.

Was this article helpful?

0 found this helpful

Related Articles

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1 min read

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo