13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Summary

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The injected code runs two operations against a site's visitors: a mobile ad-fraud and gambling-redirect

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.