13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds

Reported 31 Aug 2026 by otx · Severity: medium

Thirteen malicious Composer theme packages published on Packagist across five vendor namespaces inject JavaScript into Vietnamese movie and comic streaming sites. The injected code executes two operations: a mobile ad-fraud and gambling redirect chain, and on iPhones, a WebKit-to