MSC-2026-5762

On May 22, 2026, attackers carried out a supply chain attack against three popular Laravel-Lang Composer packages laravel-lang/lang, laravel-lang/attributes, and laravel-lang/http-statuses by abusing GitHub's tag system to point 233 version tags at commits in malicious forks rather than the...