Product
Laravel Lang
- First Reported
- May 23, 2026
- Latest Reported
- May 24, 2026
Reported Context (2)
- A supply chain attack against Laravel Lang localization packages abused GitHub tags and Composer distribution to deliver malicious releases that installed a credential-stealing payload. Laravel Lang Packages Hijacked to Deliver Credential-Stealing Malware
- A compromise affecting the community-maintained Laravel Lang project has introduced remote code execution backdoors across multiple packages in the organization, including laravel-lang/lang, laravel-lang/http-statuses, Malicious Laravel Lang Releases Deliver Cross-Platform Backdoor and Credential Stealer
Malware (1)
MITRE ATT&CK (8)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.