Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack

Multiple high-impact incidents reported: attackers poisoned four Laravel-Lang Composer packages by rewriting >700 Git tags to inject malware (supply‑chain/git-tag poisoning). Threat actors (Nimbus Manticore) expanded wartime campaigns with AI‑assisted malware, fake Zoom installers and SEO poisoning, while Lazarus deployed a memory‑only fileless RAT to evade detection. A patched Ghost CMS flaw (CVE-2026-26980) is being actively exploited to push ClickFix attacks on 700+ unpatched sites. Other notable events include a third‑party breach affecting The Oncology Institute’s patient data, a 340M‑row