DevThe Hacker Newsabout 3 hours ago
Malicious Packagist Packages Target iPhones for Crypto Theft
1 min read
Thirteen malicious Composer theme packages on Packagist inject JavaScript into Vietnamese streaming sites, deploying spyware on unpatched iPhones via WebKit-to-kernel exploits. The chain steals keychain data and cryptocurrency wallet seeds from Bitget, BitKeep, Bitpie, Phantom, Tonkeeper, Trust Wallet, and OKX. Apple patched the flaws in iOS 18.6, 18.7.3, and 26.2.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
