{"id":"GHSA-g3j5-mpp2-2fqm","aliases":[],"status":"published","title":"symfont/process typosquatting malware spoofs symfony/process","description":"In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-01-26T19:53:11Z","modified":"2023-01-26T19:53:14Z","affected":[{"source":"ghsa","ecosystem":"Packagist","package":"symfont/process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Packagist","package":"symfont/process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]}],"references":[{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/symfont/process/2021-09-10.yaml","tags":["web"]},{"url":"https://www.kernelmode.blog/typosquatting-malware-found-in-composer-repository/"},{"url":"https://github.com/advisories/GHSA-g3j5-mpp2-2fqm"},{"url":"https://www.kernelmode.blog/typosquatting-malware-found-in-composer-repository","tags":["web"]}],"sources":{"ghsa":[{"id":"GHSA-g3j5-mpp2-2fqm","title":"symfont/process typosquatting malware spoofs symfony/process","description":"In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.","status":"published","published":"2023-01-26T19:53:11Z","modified":"2023-01-26T19:53:14Z","updated_at":"2026-11-02T14:36:14.825433Z"}],"osv":[{"id":"GHSA-g3j5-mpp2-2fqm","title":"symfont/process typosquatting malware spoofs symfony/process","description":"In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.","status":"published","published":"2023-01-26T19:53:11Z","modified":"2023-01-26T19:53:12Z","updated_at":"2026-11-02T15:46:47.119724Z"}]}}