LWA-2026-7628 confirmed malware
golden-panda-casino@1.0.1
Malicious code in golden-panda-casino (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
Package golden-panda-casino@1.0.1 is an empty module (module.exports = {}) with no lifecycle hooks, no scripts, and no dependencies. The README contains French-language casino affiliate marketing content linking to goldenpandacasinoenligne[.]com. The package has no executable payload at this version.
- analyzed by
- Leitwacht
- first seen
- Aug 3, 2026, 02:39 PM
- analyzed
- Aug 3, 2026, 02:40 PM
Related advisories
- simple-date-formatter-util-6@1.0.0
- terminal-kit-tslint-config@20.1.9
- staycasinos@1.0.0
- sevencasinos@1.0.0
- sportuna@1.0.0
- simple-date-formatter-util-5@1.0.0
- simple-date-formatter-util-4@1.0.0
- a.poltoradnev-package-b@33.9.1
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.