Sanctioned Attack Infrastructure

Thirteen Packagist theme packages hand site visitors a WebKit-to-kernel iOS chain

Socket says trojanized OphimCMS and KKPhim themes chain two WebKit bugs to an IOKit kernel escape on visitors' iPhones, turning a Composer dependency problem into wallet seed theft from people who only loaded a page.