LWA-2026-7647 confirmed malware
vinci-spin@1.0.1
Malicious code in vinci-spin (npm)
T1195.002 · Compromise Software Supply Chain
Analysis
vinci-spin@1.0.1 is an empty module (module.exports = {}) with no executable code, no lifecycle hooks, and no dependencies. The package ships a 3.7KB README.md containing French-language SEO-spam content promoting the online casino vincispinfrance[.]com. The package has no install-time behaviour, no network activity, and no credential theft — it is a SEO-spam placeholder package with no functional code.
- analyzed by
- Leitwacht
- first seen
- Aug 3, 2026, 03:39 PM
- analyzed
- Aug 3, 2026, 03:43 PM
Related advisories
- wildsinos@1.0.1
- simple-date-formatter-util-11@1.0.0
- simple-date-formatter-util-12@1.0.0
- simple-date-formatter-util-10@1.0.0
- shuffle-casinos@1.0.0
- robocatenligne@1.0.1
- rizzcasinofrance@1.0.0
- kinbetfrcasino@1.0.0
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.