GitHub Advisoryadvisory · Packagist

GHSA-g3j5-mpp2-2fqm symfont/process typosquatting malware spoofs symfony/process

HIGH Published 2023-01-26 Modified 2023-01-26 Official page ↗
Ecosystem
Packagist
Packages
symfont/process
Severity
High
Reviewed
2023-01-26

Affected packages

• Packagist symfont/process: all versions (no fix yet)

Description

In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.

References