Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

iT4iNT SERVER Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework.

The affected packages include -

laravel-lang/lang
laravel-lang/http-statuses
laravel-lang/attributes
laravel-lang/actions

"The timing and pattern of the newly published tags VDS VPS Cloud


http://dlvr.it/TSh5Bw