I built DirJournal in 2007 and nearly shut it down in 2026. Instead, I spent two and a half months rebuilding it from the ground up — 30,000 listings, 7,731 redirects and one very long 404 report ...
Laravel-Lang compromise tagged 700+ versions on May 22–23, 2026, triggering PHP stealers that exfiltrate credentials.
Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.
Ghost CMS SQL injection campaign has compromised 700+ websites — including Harvard University, Oxford University, and DuckDuckGo — using a CVSS 9.4 flaw to inject ClickFix malware lures that trick ...