Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

A sophisticated supply chain attack targeting Laravel-Lang PHP packages has been identified, involving the mass modification of Git tags to inject a cross-platform credential-stealing framework. The attacker leveraged compromised organization credentials to automate the distribution of malicious code, resulting in the theft of a vast array of sensitive data from infected systems. This attack highlights the risks associated with software supply chains and the potential for attackers to gain widespread access through compromised dependencies.