LWA-2026-7640 confirmed malware
rizzcasinofrance@1.0.0
Malicious code in rizzcasinofrance (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
Package rizzcasinofrance@1.0.0 ships an empty module (module.exports = {};) and a French-language README promoting Rizz Casino's iOS app. The package has no lifecycle hooks, no dependencies, no executable code, and no repository (the repository field points to the casino homepage). The package is a placeholder with no functional code.
- analyzed by
- Leitwacht
- first seen
- Aug 3, 2026, 03:09 PM
- analyzed
- Aug 3, 2026, 03:11 PM
Related advisories
- kinbetfrcasino@1.0.0
- juliusavis@1.0.0
- leon-casino@1.0.1
- simple-date-formatter-util-9@1.0.0
- simple-date-formatter-util-8@1.0.0
- simple-date-formatter-util-7@1.0.0
- europe-fortunecasinofr@1.0.0
- golden-panda-casino@1.0.1
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.