13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Socket researchers identified 13 malicious Composer theme packages on Packagist that inject JavaScript into Vietnamese movie and comic streaming sites, running a mobile ad-fraud and gambling-redirect chain and, on iPhones, a WebKit-to-kernel exploit chain...