13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices.

“The injected code runs two operations against a site’s visitors: a mobile ad-fraud and gambling-redirect

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another A flaw in Docker Hub, the registry where container images are published and downloaded, let one

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following