Composer 4
- Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign
- Famous Chollima Targets PHP Developers Through Compromised Packagist Package
- Mini Shai-Hulud Hits @antv Ecosystem, 639 Compromised npm Package Versions
- Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise