2 stories tagged with #packagist, in publish-time order across the WeSearch catalog. Tag pages update as new stories ingest.
⌘ RSS feed for this tag → or search "Packagist"
RELATED TAGS
SOCKET
Ruby Gems and Go Modules Impersonate Dev Tools to Steal Secrets and Poison CI
GitHub account BufferZoneCorp published sleeper packages that later added credential theft, GitHub Actions tampering, fake go wrappers, and SSH persis...…
SEMGREP
Mini Shai-Hulud in Intercom Package Spreads to Packagist Using Composer Plugin
intercom/intercom-php 5.0.2 was compromised and converted into a Composer plugin that exfiltrates credentials at install time, extending the Mini Shai-Hulud campaign to PHP.…