Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

sincetomorrow's avatar

Laravel malware and phishing files detected on server.

I am developing a new site in laravel, pretty basic with laravel 10 and breeze for user registration and login. Some pages, no new models or anything. For some reason, when I have uploaded it on the server, the server gave issues to these following files.

Malware: node_modules/vite/dist/node/chunks/dep-jDlpJiMN.js Phising: vendor/phpunit/phpunit/src/Metadata/Parser/AnnotationParser.php

But they do not seem to be any change in the files locally and at the server and they seem like safe files. First is from the framework and second is from the vite. Anybody has encountered this or has any idea how to fix it? Thanks

0 likes
5 replies
Snapey's avatar
Snapey
Best Answer
Level 122

delete the vendor folder then run composer install

delete the node_modules folder then run npm install

Both will be recreated from good sources

1 like
sincetomorrow's avatar

It appears that on the shared folder, even I replaced both folders, these files again appear as malware. At another live site that has almost the same code, it does not get any error.

Any other suggestion? Thanks

Snapey's avatar

@sincetomorrow check the timestamps on the 'affected' files. Have they been changed since you uploaded?

Please or to participate in this conversation.