Hackers have compromised the Laravel-Lang open-source ecosystem, turning trusted PHP localisation packages into a vehicle for credential theft and remote code execution across developer machines and ...
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated ...
Laravel-Lang compromise tagged 700+ versions on May 22–23, 2026, triggering PHP stealers that exfiltrate credentials.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results