A supply chain attack targeting the Laravel Lang localization
packages has exposed developers to a sophisticated
credential-stealing malware campaign after attackers abused GitHub
version tags to distribute malicious code through Composer
packages. [...]
