Tag: packagist

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious Packagist Packages Disguised as Laravel Utilities Deploy Encrypted RAT

A remote access trojan (RAT) has been discovered in multiple Packagist packages published by the threat actor nhattuanbl. The malicious packages, disguised as Laravel utilities, install an encrypted PHP RAT via Composer dependencies. The payload connects to a C2 server, sends system reconnaissance …
rat
php
laravel
2026-03-04
dependency-chain
packagist
Published: March 4, 2026
Downloadable IOCs: 2
Click here to see more Attack Reports