Laravel Lang packages hijacked to deploy credential-stealing malware

Attackers compromised popular Laravel Lang localization packages and injected credential-stealing malware into them through manipulated GitHub version tags, distributing the malware to developers who installed these packages via Composer. If your organiza