LWA-2026-12362 confirmed malware
amoncasino@1.0.0
Malicious code in amoncasino (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
amoncasino@1.0.0 is a spam package that ships no functional code (its entry point is an empty module) and only a promotional README advertising an online casino at amoncasinosfrance[.]com. It is an SEO/affiliate spam placeholder with no legitimate functionality.
- analyzed by
- Leitwacht
- first seen
- Sep 23, 2026, 08:32 AM
- analyzed
- Sep 23, 2026, 08:33 AM
Related advisories
- casino-instant@1.0.0
- felix-spin@1.0.0
- roobet@1.0.0
- spinsy-casino@1.0.0
- casinolabcasino@1.0.0
- casino-hermes@1.0.0
- casino-boomerang@1.0.0
- pistolo@1.0.0
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.