TI Mindmap HUB
Threat Intelligence Report

6 Malicious Packagist Themes Ship Trojanized jQuery and FUNNULL Redirect Payloads

📅 March 12, 2026 📰 socket.dev 🔍 0 CVE(s) referenced

Six malicious Packagist themes masquerading as OphimCMS templates secretly deploy trojanized jQuery that exfiltrates visitor data, injects ads, and redirects mobile users to gambling and adult content sites via sanctioned FUNNULL infrastructure, exposing over 2,700 sites to supply chain attacks.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle