Executive Summary

Cybersecurity researchers uncovered 13 malicious Composer theme packages on Packagist that inject JavaScript into Vietnamese movie and comic streaming sites. The injected code targets unpatched iOS devices, deploying spyware that steals crypto wallet seeds while also running mobile ad‑fraud and gambling‑redirect operations.

---

Intelligence Metadata - Source Publisher: The Hacker News - Published Date: 2026-09-01T14:07:20+00:00 - Category: threat-intel

Original Description: Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The injected code runs two operations against a site's visitors: a mobile ad-fraud and gambling-redirect

"Experience is simply the name we give our mistakes."

— Oscar Wilde