13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Cybersecurity researchers have discovered 13 malicious packages on Packagist that target unpatched iPhones. These packages are designed to inject JavaScript into certain websites, specifically Vietnamese movie and comic streaming sites, that use the compromised libraries. The injected code has two main functions: it initiates mobile ad-fraud and redirects users to gambling sites. The ultimate goal of this malicious activity is to steal crypto wallet seeds from vulnerable iOS devices. The packages are part of a larger spyware deployment campaign. The campaign specifically targets users of unpatched iOS devices who visit compromised websites.