LWA-2026-11735 confirmed malware
trickz-casino@1.0.0
Malicious code in trickz-casino (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
trickz-casino@1.0.0 is a placeholder package from a known-malicious casino-promotion campaign. It ships an empty module (module.exports = {}) and a French-language SEO-spam README promoting "Trickz Casino" (homepage trickz-fr[.]fr). It has no install scripts, no dependencies, and no executable payload in this version; it functions as a parked/SEO package within a broader campaign of casino-themed packages.
- analyzed by
- Leitwacht
- first seen
- Aug 29, 2026, 07:19 PM
- analyzed
- Aug 29, 2026, 07:19 PM
Related advisories
- onlyspins-casino@1.0.0
- test__123q1@2.1.3
- exprss-helmet@1.0.1
- express-helmet@0.0.1
- dsh-tauri-rightclick@0.4.9
- nx-app@9999.0.0-security-test
- @berrysdk/transport@0.1.9
- @7nohe/openapi-react-query-codegen@0.0.0-365d4eb738d3146583431948d3ba6e27a32556be
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.