🧰 Laravel

The items that name it 10

• Trail of Bits (@trailofbits) on X
  threadas affected products2026-10-26It is written here as Laravel (shell demonstrated and covered in production-grade update).

  shell demonstrated and covered in production-grade update

• Two critical RCEs in PHP core
  advisoryas affected products2026-10-21
• ikow/php2shell-poc
  repoas affected products2026-10-21
• Socket: FUNNULL iOS Spyware Campaign via 13 Malicious Packagist Themes
  writeupas classification.technologies2026-09-01
• Socket: PHP and Composer Support Reaches Beta With Reachability Analysis
  articleas classification.technologies2026-08-22
• Claude as Autonomous Bug Bounty Hunter
  articleas affected products2026-07-30
• Laravel-Lang Supply Chain Attack: Every Tag Across Multiple Composer Packages Rewritten to Steal CI Secrets
  writeupas classification.technologies2026-06-02
• Socket: Famous Chollima Targets PHP Developers via Compromised Packagist Package
  writeupas classification.technologies2026-06-01
• Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer
  writeupas classification.technologies2026-05-23
• Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)
  repoas affected products

  listed as tech-specific scanner target