Laravel Lang Compromised with RCE Backdoor Across 700+ Versions

Reported 23 May 2026 by otx · Severity: medium

Community-maintained Laravel Lang packages were compromised with remote code execution backdoors affecting over 700 versions across multiple repositories including laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes, and laravel-lang/actions. The attack involve