Packagist

Every compromised Packagist package we track

20 packages on Packagist, drawn from 5 tracked incidents. Each page lists the exact versions named by the source advisory and what to do if you installed one.

Only versions named by a public advisory are listed. Other versions of these packages are not implicated. Browse incidents