Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

ankitparmar372's avatar

getting virus on my lravavel package suggest by domain

/vendor/psy/psysh/src/Psy/Shell.php this file has virus inform by my hosting provider .

0 likes
3 replies
rahulsingh92's avatar

Hi @ankitparmar372 have you got any solution on this? please share with us I have same problem

Here is the list of files our scanning has identified :

/vendor/psy/psysh/src/Psy/Shell.php

Snapey's avatar
Snapey
Best Answer
Level 122

@rahulsingh92

it's unlikely to be a virus but has virus like properties since it performs repl functions.

You should not need Tinker in production, so perhaps you could just remove it?

Taylor has removed it on the latest versions, perhaps for situations like this?

Thyrosis's avatar

It probably triggered the hosting providers scans because of its name, shell.

One of the ways hackers gain access to servers is by abusing unsecure applications, uploading a remote shell script and then using that script to dig deeper and beyond the application itself to the server level. Normally these scripts have some strange or unrecognisable name, but sometimes they're as clear as shell.php.

In this case, as long as the file modification date isn't off from your other Laravel core files and its content is still the same as it is on your local environment, it's not a virus.

Please or to participate in this conversation.