php

After a six-month community process and unanimous vote, the PHP Group has retired the PHP License 3.01 and Zend Engine License in favor of the widely recognized BSD 3-Clause.

Attackers rewrote Git tags across four Laravel localization packages to point to malicious forks, poisoning hundreds of versions and deploying a credential stealer targeting cloud keys, SSH, and crypto wallets.