Laravel Lang packages hijacked to deploy credential-stealing malware

Claude Code, Copilot and Codex all got hacked. Every attacker went for the credential, not the model.

State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns

Credential-stealing crew spoofs VPN clients from Cisco, Fortinet, and others