13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices.

“The injected code runs two operations against a site’s visitors: a mobile ad-fraud and gambling-redirect

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Pointing AI at archives found a forgotten meteorite, lost rhinos, and more

Pointing AI at archives found a forgotten meteorite, lost rhinos, and more Source: Hacker News

Qwen-Image-3.0: Rich Content, Authentic Details, Deep Knowledge

Qwen-Image-3.0: Rich Content, Authentic Details, Deep Knowledge Source: Hacker News

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information