Tag
#packagist
2 stories taggedpackagist.
Threat Intelligence
Booby-trapped Composer packages hijack Vietnamese streaming sites to hit old iPhones
Thirteen fake theme libraries on Packagist quietly loaded ad-fraud scripts and pushed spyware at visitors running unpatched iOS, researchers say.
4 min read
Threat Intelligence
Hijacked GitHub Repos Turned Into Attack Machines Hunting cPanel Servers
Researchers found booby-trapped PHP packages using GitHub's own automation to scan the internet for web hosting control panels.
4 min read