1.
Supply-chain attack backdoored 700+ Laravel Lang package versions
A widely used community PHP translation ecosystem was compromised across hundreds of historical releases with a remote-code-execution backdoor
@SocketSecurity on Backlist
1 appearance on the backlist front page in the last 30 days.