klikkikasino-fi@0.0.0-stage
Malicious code in klikkikasino-fi (npm)
Analysis
This publish (klikkikasino-fi@0.0.0-stage) is an empty placeholder shell: the tarball contains only a package.json declaring "stub": true and "description": "Temporary package placeholder for staged publishing", plus a README saying an "operational version" has been submitted and is awaiting staged release. There is no executable code, no lifecycle hook, no bin entry, no dependency and no network access in this version, and no network IOC exists to report. The analysis is metadata-only: the package reserves the name with version 0.0.0-stage and states that a functional release will follow. Treat the name as hostile-reserved and do not install any later version without review.
- analyzed by
- Leitwacht
- first seen
- Oct 30, 2026, 05:34 PM
- analyzed
- Oct 30, 2026, 05:35 PM
Related advisories
- @axo_cuy/baileyss@3.0.1
- @sakataa/baileys@2.0.0
- claims-acct-unlock@25.2.1
- dependencykfeg@25.1.9
- @animebails/baileys@1.0.0
- @animebails/baileys@1.0.4
- ccsec-crypto-toolkit@0.0.0-stage
- tauri-runtime-electron@0.0.0-stage
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.