In September 2021, security researchers discovered a malicious Composer package called symfont/process, a typosquat targeting users of symfony/process. The malicious package has since been removed from Packagist.

References

• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfont/process/2021-09-10.yaml
• https://www.kernelmode.blog/typosquatting-malware-found-in-composer-repository/