
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@php-wasm/xdebug-bridge
Advanced tools
A bridge server for XDebug and PHP.wasm that facilitates debugging connections between XDebug and Browser devtools.
npm install @php-wasm/xdebug-bridge
import { startBridge } from './xdebug-bridge/src/start-bridge';
// Start with default settings
const server = startBridge();
await server.start();
import { startBridge } from './xdebug-bridge/src/start-bridge';
// Start with custom configuration
const server = startBridge({
cdpHost: '127.0.0.1', // CDP connection host
cdpPort: 9229, // CDP connection port
dbgpPort: 9003, // XDebug connection port
phpRoot: './', // Root to directory
});
await server.start();
# Start with default settings
npx xdebug-bridge
# Custom port and verbose logging
npx xdebug-bridge --port 9000 --verbosity debug
# Show help
npx xdebug-bridge --help
port: Xdebug port to listen on (default: 9003)host: Xdebug host to bind to (default: 'localhost')php-root: Path to PHP root directory (default: './')verbosity: Output logs and progress messages (choices: "quiet", "normal", "debug") (default: "normal")help: Display helpcdpPort: Port to listen for CDP connections (default: 9229)cdpHost: Host to bind to (default: '127.0.0.1')dbgpPort: Port to listen for XDebug connections (default: 9003)phpRoot: Root path for php filesverbosity: Output logs and progress messages (choices: "quiet", "normal", "debug") (default: "normal")phpInstance: PHP instancegetPHPFile: Custom file listing functionbreakOnFirstLine: Breaks on the first breakable lineThe bridge listens to events for monitoring connection activity:
connected: Xdebug Server has starteddisconnected: Xdebug Server has stoppedmessage: Raw XDebug data receivederror: Xdebug Server error occurredclientConnected: Devtools client connectedclientDisconnected: Devtools client disconnectedmessage: Raw Devtools data receivederror: Devtools client error occurredFAQs
XDebug bridge server for PHP.wasm
The npm package @php-wasm/xdebug-bridge receives a total of 34,640 weekly downloads. As such, @php-wasm/xdebug-bridge popularity was classified as popular.
We found that @php-wasm/xdebug-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain