13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices.

“The injected code runs two operations against a site’s visitors: a mobile ad-fraud and gambling-redirect

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Female US rower completes historic solo journey from California to Hawaii

Female US rower completes historic solo journey from California to Hawaii Source: Hacker News

Attack Update: Top 5 Attack-IPs auf doode.info – 20.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. Keine relevanten IPs erfasst (ruhig oder stark gefiltert). Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message