Skip to content
OpenAdvisories
High GHSA-g3j5-mpp2-2fqm

symfont/process typosquatting malware spoofs symfony/process

Published Jan 26, 2023 · Updated Jan 26, 2023 · Assigned by GHSA

Description

In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist symfont/process all versions — GHSA-g3j5-mpp2-2fqm

References