#packagist


13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Sep 1, 2026 // 19:02

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic […]

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

May 23, 2026 // 19:09

A new “coordinated” supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a […]

Warning: Malicious Laravel Packages on Packagist Targeting All Major OSs

Mar 4, 2026 // 14:16

Security researchers at Socket discovered several malicious Packagist packages masquerading as Laravel utilities. These packages deploy a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. Malicious Packages Identified The threat […]