Laravel Lang Compromised with RCE Backdoor Across 700 Versions (opens in new tab)

(socket.dev)

3 pointscsmantle2d ago1 comments

1 comments

> The affected packages are not part of the official Laravel framework. They are third-party localization packages used by Laravel applications.

Also, whats up with this wave of supply chain attacks?

j / k navigate · click thread line to collapse

> The affected packages are not part of the official Laravel framework. They are third-party localization packages used by Laravel applications.

Also, whats up with this wave of supply chain attacks?

j / k navigate · click thread line to collapse