LWA-2026-11734 confirmed malware
onlyspins-casino@1.0.0
Malicious code in onlyspins-casino (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
onlyspins-casino@1.0.0 is a casino-promotion spam package. It ships no functional code (index.js is an empty module) and no install scripts; its only content is a French-language README that promotes the online casino site onlyspinss[.]fr with affiliate-style review copy. The package is published as part of a bulk casino-spam campaign and provides no legitimate library functionality.
- analyzed by
- Leitwacht
- first seen
- Aug 29, 2026, 07:15 PM
- analyzed
- Aug 29, 2026, 07:15 PM
Related advisories
- test__123q1@2.1.3
- exprss-helmet@1.0.1
- express-helmet@0.0.1
- dsh-tauri-rightclick@0.4.9
- nx-app@9999.0.0-security-test
- @berrysdk/transport@0.1.9
- @7nohe/openapi-react-query-codegen@0.0.0-365d4eb738d3146583431948d3ba6e27a32556be
- cacao1@9.9.9
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.