Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer (aikido.dev)

Another one bites the dust. Has all the hallmarks of teampcp - no doubt they're still wading through mountains of credentials.