# SymfonyCon Warsaw 2026: The Attack Reached PHP: Composer and Packagist, One Year On

DevFeed: [SymfonyCon Warsaw 2026: The Attack Reached PHP: Composer and Packagist, One Year On](<https://devfeed.tech/articles/symfonycon-warsaw-2026-the-attack-reached-php-composer-and-packagist-one-year-on-31523.md>)

Original publisher: [Read original article](<https://symfony.com/blog/symfonycon-warsaw-2026-the-attack-reached-php-composer-and-packagist-one-year-on>)

Author: Eloïse Charrier

Published: 2026-09-16T12:30:00Z

Content type: article

Language: en

Sources: [Symfony Blog](<https://devfeed.tech/sources/symfony-blog.md>)

Topics: [Symfony](<https://devfeed.tech/topics/symfony.md>), [Composer](<https://devfeed.tech/topics/composer.md>), [PHP](<https://devfeed.tech/topics/php.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [composer](<https://devfeed.tech/tags/composer.md>), [conference](<https://devfeed.tech/tags/conference.md>), [github](<https://devfeed.tech/tags/github.md>), [php](<https://devfeed.tech/tags/php.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [symfony](<https://devfeed.tech/tags/symfony.md>)

## AI overview

SymfonyCon Warsaw 2026 will take place in Poland on November 26-27, with talks across three parallel tracks and related community events. The announcement highlights a talk about PHP supply-chain security changes made after attacks involving Composer and Packagist, including malware detection, transparency logging, dependency policies, immutable releases, release-age settings, maintainer MFA status, and ownership controls.

## Source excerpt

Get ready to connect with the global Symfony community! SymfonyCon Warsaw 2026 is landing in Poland, on November 26-27. We are bringing you two days of inspiring talks across 3 parallel tracks, alongside plenty of networking opportunities and vibrant...