LWA-2026-11891 confirmed malware
7bit-casino@1.0.0
Malicious code in 7bit-casino (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
7bit-casino@1.0.0 is an SEO-spam package: its only code file (index.js) is an empty module, and its README is promotional content for the 7Bit Casino online gambling site, embedding affiliate links to 7bit[.]casinologin[.]mobi and 7bitcasino[.]com and an image hosted at i[.]ibb[.]co. The package ships no functional library and exists to drive traffic to the casino affiliate destination.
- analyzed by
- Leitwacht
- first seen
- Sep 4, 2026, 01:42 AM
- analyzed
- Sep 4, 2026, 01:43 AM
Related advisories
- bitkingz@1.0.0
- rolling-slots@1.0.0
- jeet-city@1.0.0
- richard-guide@1.0.0
- tailwind-aspect@0.4.2
- 2nestjs@0.0.1
- 1nestjs@0.0.1
- 0nestjs@0.0.1
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.