Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor

Socket disclosed a widespread supply-chain compromise of the laravel-lang GitHub organization that injected RCE backdoors into ~700 historical localization package versions; the backdoor executes when Composer autoloads files and downloads a second-stage cross-platform info‑stealer with 17 collectors targeting cloud metadata, CI/CD secrets, Kubernetes tokens, wallets, and browser credentials. Immediate actions recommended include auditing composer.lock for laravel-lang packages, blocking or pinning dependencies, rotating all credentials and secrets, rebuilding hosts/CI runners from known-good images, and preserving logs and artifacts for forensic analysis.