LWA-2026-10825 confirmed malware
statist-browser-typed-client-eventea.projects.pwakasko@0.0.1
Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
The package is an empty stub: its only module exports an empty object, it declares no lifecycle hooks, no executables, and no dependencies, and it ships no repository or documentation. The package name mimics a service-client library but the code provides no functionality. No network endpoints, credential access, or executable payload are present in this version.
- analyzed by
- Leitwacht
- first seen
- Aug 8, 2026, 07:28 AM
- analyzed
- Aug 8, 2026, 07:28 AM
Related advisories
- statist-browser-typed-client-eventea.projects.pwafamily@35.8.0
- @kolbo/mcp@1.57.1
- gas-diff-core@1.0.1
- @coralxyz/anchor@0.30.2
- dolyame-ui-buttonstore@35.8.1
- dolyame-ui-cardlogo@35.8.1
- dolyame-ui-contenteditable@35.8.1
- dolyame-ui-contextmenusearchable@35.8.1
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.