Packagist

Packagist Themes iOS Spyware Steals Crypto Wallet Seeds

• Malware

Packagist Themes iOS Spyware Steals Crypto Wallet Seeds

Do Son September 7, 2026 0

Researchers discovered malicious Packagist themes iOS spyware infecting unpatched iPhones. This spyware targets crypto wallets and steals device data.

GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign

• Cybercriminals

GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign

Do Son July 23, 2026 0

A GitHub Actions abuse campaign turned thousands of workflows into cPanel and WHM exploitation infrastructure, harvesting cloud and payment credentials.

North Korea-Linked PolinRider Supply Chain Attack Expands Across Open Source

• Cybercriminals

North Korea-Linked PolinRider Supply Chain Attack Expands Across Open Source

Do Son July 9, 2026 0

Socket links the PolinRider supply chain attack to North Korean hackers. The campaign hid loaders in 108 open-source packages across four ecosystems.

The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom

• Malware

The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom

Do Son May 2, 2026 0

Socket uncovers a massive Mini Shai-Hulud breach in the Intercom PHP SDK. Malicious version 5.0.2 steals cloud secrets and GitHub tokens. Rotate keys now!

Malicious Packagist Themes Target Vietnamese OphimCMS Sites with Trojanized JS

• Malware

Malicious Packagist Themes Target Vietnamese OphimCMS Sites with Trojanized JS

Do Son March 17, 2026 0

Socket uncovers a Packagist supply chain attack targeting Vietnamese OphimCMS streaming sites with trojanized themes linked to sanctioned entity FUNNULL.

Malicious PHP Packages Found Hidden in Laravel Ecosystem

• Malware

Malicious PHP Packages Found Hidden in Laravel Ecosystem

Do Son March 6, 2026 0

Socket researchers uncover a Packagist supply chain attack where fake Laravel utility packages secretly install a persistent Remote Access Trojan (RAT).