LWA-2026-11739 confirmed malware
night-casino@1.0.0
Malicious code in night-casino (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
night-casino@1.0.0 is an inert placeholder package: its only code file (index.js) exports an empty object, and it declares no install scripts, binaries, or dependencies. The package ships a French-language README promoting an online casino (nightfrance[.]fr). It contains no executable payload of its own.
- analyzed by
- Leitwacht
- first seen
- Aug 29, 2026, 07:30 PM
- analyzed
- Aug 29, 2026, 07:31 PM
Related advisories
- simsino-casino@1.0.0
- bdmbet-online@1.0.0
- lunubet-casino@1.0.0
- olympe-casino@1.0.0
- allyspin-casino@1.0.0
- trickz-casino@1.0.0
- onlyspins-casino@1.0.0
- test__123q1@2.1.3
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.