Back Gbhackers

Malicious Laravel Packages Deploy PHP RAT, Grant Remote Access to Attackers

Gbhackers •Mayura Kathir • March 4, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Supply Chain Attack: Malicious Laravel Packages Deploy PHP RAT A supply chain attack has targeted the PHP developer community via Packagist, where threat actor nhattuanbl published malicious packages disguised as Laravel utility libraries. These packages contain a fully functional remote access trojan (RAT), allowing attackers to gain silent and persistent control over systems that install them. 5 sources 40

Extracted Entities

Malicious Laravel Packages Deploy PHP RAT, Grant Remote Access to Attackers

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)