LWA-2026-7624 confirmed malware
sportuna@1.0.0
Malicious code in sportuna (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
The package exports an empty object and contains no executable code. Its README is a German-language casino review linking to sportuna-sportwetten[.]com. The package has no lifecycle hooks, no scripts, and no functional behaviour — it is an empty placeholder published as part of a known malicious campaign.
- analyzed by
- Leitwacht
- first seen
- Aug 3, 2026, 01:54 PM
- analyzed
- Aug 3, 2026, 01:54 PM
Related advisories
- simple-date-formatter-util-5@1.0.0
- simple-date-formatter-util-4@1.0.0
- a.poltoradnev-package-b@33.9.1
- accounts-limits@0.0.2
- accounts-ddos-shield@33.3.8
- remote_session_elements@9999.0.0
- dc-renewals-layout2@9999.0.0
- store-locator-widget@9999.0.0
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.