Coordinated malicious publish campaign on Packagist distributing trojanized OphimCMS and KKPhim streaming-site themes as hostile republishes under attacker-controlled vendor namespaces. The shipped front-end assets drive mobile ad-fraud and gambling redirects on all platforms, and on unpatched iOS devices chain WebKit and kernel exploits to install spyware that harvests keychain data, SMS, contacts, photos, browser cookies, location history and cryptocurrency wallet seeds.