LWA-2026-10825 confirmed malware

statist-browser-typed-client-eventea.projects.pwakasko@0.0.1

Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)

T1195.002 · Compromise Software Supply Chain

Analysis

The package is an empty stub: its only module exports an empty object, it declares no lifecycle hooks, no executables, and no dependencies, and it ships no repository or documentation. The package name mimics a service-client library but the code provides no functionality. No network endpoints, credential access, or executable payload are present in this version.

analyzed by
Leitwacht
first seen
Aug 8, 2026, 07:28 AM
analyzed
Aug 8, 2026, 07:28 AM

Related advisories

browse all confirmed advisories →

Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.