Thirteen PHP packages ended at an iPhone kernel — and every flaw in the chain was already patched
2026-09-03Security
Socket found Composer themes on Packagist that inject JavaScript into Vietnamese streaming sites and run a WebKit-to-kernel chain on visiting iPhones, taking keychains, SMS databases and crypto wallet seeds. The campaign targets iOS 18.4 to 18.6.x. Every vulnerability it uses has a fix.