securityBACKGROUND
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Steal
BACKGROUND
2 SIGNALSFIRST DETECTED 23 May 2026
Narrative synthesis pending — 2 signals collected.
How the story developed
23 May
Laravel Lang packages hijacked to deploy credential-stealing malware
REPORT · WHAT · BleepingComputer
23 May
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
REPORT · WHAT · The Hacker News
Other feeds and industry voices
19 May
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of
REPORT · HOW · The Hacker NewsOPEN STORY
23 May
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases
REPORT · WHO · The Hacker NewsOPEN STORY
19 May
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious code that harvests
REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
BleepingComputerThe Hacker News
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →