SlowMist flags PolinRider exploit in LaravelNova package with 700K downloads
- —PolinRider exploit affects over 700,000 LaravelNova downloads
- —Malicious code sits in tailwind.config.js and executes during frontend builds
- —Delivery server IPs are resolved dynamically through Ethereum transactions
- —Developers advised to inspect composer.lock files and rotate credentials
Why it matters: The compromise of a widely used dev tool threatens wallet keys and sensitive data across the Ethereum ecosystem.
Source: Coinfomania