Related Threat Clusters
-
Supply Chain Attack Compromises Laravel Lang Packages with Credential Stealer
On May 22, 2026, a supply chain attack targeted Laravel Lang localization packages, compromising 233 versions across four repositories. Attackers exploited GitHub's version tagging system to redirect legitimate tags to…
17 articles · Updated May 23, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
753 articles · Updated April 29, 2026 -
GitHub Actions Exploited to Attack cPanel and WHM Servers
A large-scale cyber campaign has compromised multiple GitHub repositories to deploy malicious workflows targeting cPanel and WHM servers. Attackers are using GitHub Actions to automate the scanning of the internet for…
4 articles · Updated July 23, 2026 -
Packagist Issues Urgent Update After GitHub Actions Token Leak
A recent change in GitHub's token format has led to a security vulnerability in Composer, exposing sensitive GitHub authentication tokens in CI/CD logs. This flaw affects PHP developers globally, as the outdated…
2 articles · Updated May 14, 2026 -
OphimCMS Supply Chain Attack Delivers Trojanized jQuery via Malicious Packagist Themes
A supply chain attack has compromised OphimCMS, a Vietnamese-language Laravel CMS, through six malicious Composer packages published on Packagist. These packages, disguised as legitimate themes, contain trojanized…
2 articles · Updated March 17, 2026 -
Supply Chain Attack: Malicious Laravel Packages Deploy PHP RAT
A supply chain attack has targeted the PHP developer community via Packagist, where threat actor nhattuanbl published malicious packages disguised as Laravel utility libraries. These packages contain a fully functional…
5 articles · Updated March 4, 2026
Recent Intelligence Reports
- Hackers Turn GitHub Actions Into a Global Botnet for Attacking Web Hosting Servers — Gbhackers · July 23, 2026
- North Korean hackers expand supply chain attack campaign across ecosystems — Ground.News · July 3, 2026
- Hackers Compromise GitHub Maintainer Accounts to Publish PolinRider — Gbhackers · July 3, 2026
- Laravel Lang Supply Chain Advisory — Snyk · May 23, 2026
- Supply Chain Attack Targets Laravel — Aikido.Dev · May 23, 2026
- Packagist Warns: Update Composer Now After GitHub Actions Token Leak — Gbhackers · May 14, 2026
- 6 Malicious Packagist Themes Ship Trojanized jQuery in OphimCMS Supply Chain Attack — Cybersecuritynews · March 17, 2026
- Packagist Themes Deliver Trojanized jQuery in OphimCMS Supply Chain Attack — Gbhackers · March 17, 2026