13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices.

“The injected code runs two operations against a site’s visitors: a mobile ad-fraud and gambling-redirect

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private

Attack Update: Top 5 Attack-IPs auf doode.info – 29.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 34.158.96.18 — 2533 requests (recent log) 89.167.35.212 — 1111 requests (recent log) 136.108.98.202 — 276 requests (recent

Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot

Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot Check Point Research has disclosed a technique that uses Microsoft Defender’s own legitimately signed boot-time remediation driver