TGTGInsighttelegram intelligenceLIVE / telegram public index
← The Hacker News
The Hacker News avatar

TGINSIGHT POST

Post #8528

@thehackernews

The Hacker News

Views8,760Post view count
PostedMar 403/04/2026, 09:38 AM
Post content

Post content

🖥️ Malicious Packagist packages posing as Laravel helpers install a remote access trojan. The malware connects to a C2 server, runs shell commands, uploads files, captures screenshots, and retries every 15 seconds to stay persistent. 🔗 Malware behavior and package names → https://thehackernews.com/2026/03/fake-laravel-packages-on-packagist.html