Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
Socket researchers uncovered more FUNNULL-linked activity on Packagist: 13 malicious themes that expose site visitors to gambling redirects and, on iPhones, a WebKit-to-kernel exploit chain that installs spyware and steals crypto wallet seeds.
https://socket.dev/blog/packagist-themes-ios-spyware #PHP
2026-08-31T15:36:41.506Z