Reposted by Matt Stenson
#Laravel-lang: Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer #Malware
Attackers injected a credential stealer into 200+ Laravel-lang package versions by pushing tags tied to attacker-controlled forks:
#SoftwareSupplyChain
👇
aikido.dev
Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer
Attackers injected a credential stealer into 200+ versions of popular Laravel-Lang packages, delivering a credential stealer targeting cloud keys, SSH keys, browsers, crypto wallets and more.