On the night of May 22, 2026, an unidentified attacker with push access to the Laravel-Lang GitHub organization rewrote every existing version tag across four widely used PHP localization packages — ...
Hackers rewrote all Git tags across four Laravel-Lang packages, poisoning over 700 historical versions with backdoors.