Breach404
Back to Insights
Secure Software2 min readMay 23, 2026

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

Attackers compromised popular Laravel-Lang PHP packages on package repositories and injected malicious code designed to steal credentials across Windows, macOS, and Linux systems. You should immediately audit your dependencies for these compromised packag

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free