---
id: 2436
title: "Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/supply-chain-attack-targets-laravel-lang-packages-with-credential-stealer"
published_at: "2026-05-23 00:00"
tags: ["cloud", "supply-chain", "credential-theft", "php", "supply-chain-security", "laravel", "composer", "incident"]
phying_url: "https://phying.com/item/2436"
lang: en
---

# Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer

## Summary

233 versions across three Laravel-Lang repositories were compromised via malicious tags pointing to attacker fork commits, loading a PHP credential stealer through Composer's autoloader.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-05-23 00:00
- **Original:** https://www.aikido.dev/blog/supply-chain-attack-targets-laravel-lang-packages-with-credential-stealer
- **Phying News:** https://phying.com/item/2436