LWA-2026-7630 confirmed malware
europe-fortunecasinofr@1.0.0
Malicious code in europe-fortunecasinofr (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
Package europe-fortunecasinofr@1.0.0 ships an empty index.js (module.exports = {}) and a French-language README.md promoting Europe Fortune Casino with embedded affiliate links. The package has no lifecycle hooks, no executable code, and performs no data exfiltration or credential theft. It is an inert SEO/spam package.
- analyzed by
- Leitwacht
- first seen
- Aug 3, 2026, 02:39 PM
- analyzed
- Aug 3, 2026, 02:41 PM
Related advisories
- golden-panda-casino@1.0.1
- simple-date-formatter-util-6@1.0.0
- terminal-kit-tslint-config@20.1.9
- staycasinos@1.0.0
- sevencasinos@1.0.0
- sportuna@1.0.0
- simple-date-formatter-util-5@1.0.0
- simple-date-formatter-util-4@1.0.0
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.