<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[🦋 🚨 Supply chain attack on the Laravel Lang organization:]]></title><description><![CDATA[<p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f98b.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--butterfly" style="height:23px;width:auto;vertical-align:middle" title="🦋" alt="🦋" /> <img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f6a8.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--rotating_light" style="height:23px;width:auto;vertical-align:middle" title="🚨" alt="🚨" /> Supply chain attack on the Laravel Lang organization:</p><p>700+ historical versions across multiple community-maintained Laravel Lang packages were compromised with an RCE backdoor, including:</p><p>laravel-lang/lang <br />laravel-lang/http-statuses<br />laravel-lang/attributes<br />Laravel-Lang/actions<br /><a href="https://socket.dev/blog/laravel-lang-compromise" rel="nofollow noopener"><span>https://</span><span>socket.dev/blog/laravel-lang-c</span><span>ompromise</span></a></p><p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f517.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--link" style="height:23px;width:auto;vertical-align:middle" title="🔗" alt="🔗" /> <a href="https://bsky.app/profile/socket.dev/post/3mmijb36b4k2v" rel="nofollow noopener"><span>https://</span><span>bsky.app/profile/socket.dev/po</span><span>st/3mmijb36b4k2v</span></a></p><p><a href="https://mstdn.feddit.social/tags/Security" rel="tag">#<span>Security</span></a> <a href="https://mstdn.feddit.social/tags/SupplyChain" rel="tag">#<span>SupplyChain</span></a> <a href="https://mstdn.feddit.social/tags/Bluesky" rel="tag">#<span>Bluesky</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/24160b03-965a-42bb-b721-eaf7698743a7/supply-chain-attack-on-the-laravel-lang-organization</link><generator>RSS for Node</generator><lastBuildDate>Sat, 13 Jun 2026 09:34:19 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/24160b03-965a-42bb-b721-eaf7698743a7.rss" rel="self" type="application/rss+xml"/><pubDate>Sat, 23 May 2026 04:41:22 GMT</pubDate><ttl>60</ttl></channel></rss>