Laravel Lang Compromised with RCE Backdoor Across 700 Versions

 (socket.dev)

7 points | by csmantle 9 hours ago ago

3 comments

  • Alifatisk 8 hours ago ago

    > The affected packages are not part of the official Laravel framework. They are third-party localization packages used by Laravel applications.

    Also, whats up with this wave of supply chain attacks?

  • xzp1212138 8 hours ago ago

    [flagged]

  • undefined 8 hours ago ago
    [deleted]