LWA-2026-12966 confirmed malware

ticketcathayoct12@0.0.0-stage

Malicious code in ticketcathayoct12 (npm)

T1195.002 · Compromise Software Supply Chain

Analysis

This package is an empty placeholder. The published tarball contains only a README and a package.json (name ticketcathayoct12, version 0.0.0-stage, description "Temporary package placeholder for staged publishing", stub: true). It declares no dependencies, no optional dependencies, no bin entries and no lifecycle scripts, and ships no JavaScript or other executable content, so installing it runs nothing and contacts no network destination. This record is based on the package manifest and tarball contents; the package contains no code to analyse and no code-level indicators are available.

analyzed by
Leitwacht
first seen
Oct 13, 2026, 09:17 AM
analyzed
Oct 13, 2026, 09:18 AM

Related advisories

browse all confirmed advisories →

Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.