ninjacasino-fi@0.0.0-stage
Malicious code in ninjacasino-fi (npm)
Analysis
ninjacasino-fi@0.0.0-stage is an empty placeholder publish: the tarball contains only package.json and README.md (336 bytes unpacked), carries stub:true, and describes itself as a "Temporary package placeholder for staged publishing". It declares no lifecycle hooks, no bin entries, no dependencies and ships no JavaScript, so installing it executes nothing and contacts nothing. No network IOC exists because the package contains no code. It is a reserved name staged ahead of a real payload and should be treated as a precursor to a later, non-stub release under the same name.
- analyzed by
- Leitwacht
- first seen
- Oct 30, 2026, 05:56 PM
- analyzed
- Oct 30, 2026, 05:57 PM
Related advisories
- lumikasino@0.0.0-stage
- klikkikasino-fi@0.0.0-stage
- @axo_cuy/baileyss@3.0.1
- @sakataa/baileys@2.0.0
- claims-acct-unlock@25.2.1
- dependencykfeg@25.1.9
- @animebails/baileys@1.0.0
- @animebails/baileys@1.0.4
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.