{"id":"GHSA-g3j5-mpp2-2fqm","aliases":[],"title":"symfont/process typosquatting malware spoofs symfony/process","description":"In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.","severity":"high","score":null,"published":"2023-01-26T19:53:11.000Z","modified":"2023-01-26T19:53:12.000Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"symfont/process","ranges":[{"events":[{"introduced":"0"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":[]}],"references":["https://github.com/FriendsOfPHP/security-advisories/blob/master/symfont/process/2021-09-10.yaml","https://www.kernelmode.blog/typosquatting-malware-found-in-composer-repository"],"sources":[{"name":"OSV","id":"GHSA-g3j5-mpp2-2fqm","modified":"2023-01-26T19:53:12Z","url":"https://osv.dev/vulnerability/GHSA-g3j5-mpp2-2fqm"}],"assessments":[]}