tauri-cef-webview@0.0.0-stage
Malicious code in tauri-cef-webview (npm)
Analysis
This package is an inert placeholder version (339 bytes unpacked; only package.json and README.md) that reserves the name tauri-cef-webview, which mimics the Tauri/CEF webview ecosystem. It declares itself a "temporary package placeholder for staged publishing" and states that an "operational version" is awaiting a staged release. The version contains no JavaScript, no lifecycle hooks, no bin entries and no dependencies, so nothing executes on install; it is a name-reservation step ahead of a later payload version. No network indicators exist in this version.
- analyzed by
- Leitwacht
- first seen
- Oct 19, 2026, 02:56 AM
- analyzed
- Oct 19, 2026, 02:57 AM
Related advisories
- @chatunitycenter/baileys@1.0.0
- neverthrow-js@5.0.0
- aldi02-baileys@0.0.0-stage
- aemath-baileys@0.0.0-stage
- nwfp-prettier-config@0.0.0-stage
- @mntv-analysis/workspaces-components@0.0.0-stage
- vjkpwjxbvndelta@0.0.0-stage
- zxcvb90-utils-helper@1.0.1
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.