Supply chain attack on the Laravel



🚨 Supply chain attack on the Laravel Lang organization:

700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including:

laravel-lang/lang
laravel-lang/http-statuses
laravel-lang/attributes
Laravel-Lang/actions

The payload targets cloud creds, CI/CD secrets, Kubernetes tokens, Vault, browser data, password managers, SSH keys, and more.

Subsection: Tech
Section: Latest Updates

Topic Files

Last edited REHAN - 24 May 2026, 01:43
Latest Activity: 24 May 2026, 01:43