MSC-2026-11548

Coordinated malicious publish campaign on Packagist distributing trojanized OphimCMS and KKPhim streaming-site themes as hostile republishes under attacker-controlled vendor namespaces. The shipped front-end assets drive mobile ad-fraud and gambling redirects on all platforms, and on unpatched iO...