13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Home / Tech / 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

September 2, 2026 dirk 0 Comments 3 tags

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices.

“The injected code runs two operations against a site’s visitors: a mobile ad-fraud and gambling-redirect

Source: The Hacker News

Explore More

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously

Launch HN: Mireye (YC S26) – Infrastructure for Physical World AI Agents

Launch HN: Mireye (YC S26) – Infrastructure for Physical World AI Agents Source: Hacker News