GitHub Advisoryadvisory · Packagist
GHSA-g3j5-mpp2-2fqm symfont/process typosquatting malware spoofs symfony/process
HIGH
Official page ↗
- Ecosystem
- Packagist
- Packages
- symfont/process
- Severity
- High
- Reviewed
- 2023-01-26
Affected packages
• Packagist symfont/process: all versions (no fix yet)
Description
In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.