MAL-2025-192161Malicious code in elf-stats-starlit-mitten-980 (npm)
| Ecosystem | Package | Version |
|---|---|---|
| npm | elf-stats-starlit-mitten-980 | 1.0.0 |
| npm | elf-stats-starlit-mitten-980 | 1.0.1 |
| npm | elf-stats-starlit-mitten-980 | 1.0.2 |
| npm | elf-stats-starlit-mitten-980 | 1.0.3 |
| npm | elf-stats-starlit-mitten-980 | 1.0.4 |
| npm | elf-stats-starlit-mitten-980 | 1.0.5 |
| npm | elf-stats-starlit-mitten-980 | 1.0.6 |
| npm | elf-stats-starlit-mitten-980 | 1.0.7 |
| npm | elf-stats-starlit-mitten-980 | 1.0.8 |
| npm | elf-stats-starlit-mitten-980 | 1.0.9 |
| npm | elf-stats-starlit-mitten-980 | 1.1.9 |
| npm | elf-stats-starlit-mitten-980 | 1.2.10 |
| npm | elf-stats-starlit-mitten-980 | 1.2.11 |
| npm | elf-stats-starlit-mitten-980 | 1.2.12 |
| npm | elf-stats-starlit-mitten-980 | 1.2.13 |
| npm | elf-stats-starlit-mitten-980 | 1.2.14 |
| npm | elf-stats-starlit-mitten-980 | 1.2.15 |
| npm | elf-stats-starlit-mitten-980 | 1.2.16 |
| npm | elf-stats-starlit-mitten-980 | 1.2.17 |
| npm | elf-stats-starlit-mitten-980 | 1.2.18 |
| npm | elf-stats-starlit-mitten-980 | 1.2.19 |
| npm | elf-stats-starlit-mitten-980 | 1.2.20 |
| npm | elf-stats-starlit-mitten-980 | 1.2.21 |
| npm | elf-stats-starlit-mitten-980 | 1.2.22 |
| npm | elf-stats-starlit-mitten-980 | 1.2.23 |
| npm | elf-stats-starlit-mitten-980 | 1.2.24 |
| npm | elf-stats-starlit-mitten-980 | 1.2.25 |
| npm | elf-stats-starlit-mitten-980 | 1.2.26 |
| npm | elf-stats-starlit-mitten-980 | 1.2.27 |
| npm | elf-stats-starlit-mitten-980 | 1.2.28 |
| npm | elf-stats-starlit-mitten-980 | 1.2.9 |
{"modified":"2025-12-03T15:59:29Z","published":"2025-12-03T15:59:29Z","schema_version":"1.7.4","id":"MAL-2025-192161","summary":"Malicious code in elf-stats-starlit-mitten-980 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c6a11d4793a55b33f6c78fe238661a49d6cec2e24dde3cc4ae69580f3d78e688)\nThe package elf-stats-starlit-mitten-980 was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"elf-stats-starlit-mitten-980"},"versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.7","1.0.8","1.0.6","1.0.9","1.1.9","1.2.9","1.2.10","1.2.11","1.2.12","1.2.13","1.2.14","1.2.15","1.2.16","1.2.17","1.2.21","1.2.19","1.2.18","1.2.20","1.2.22","1.2.23","1.2.24","1.2.25","1.2.26","1.2.27","1.2.28"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]}],"database_specific":{"malicious-packages-origins":[{"import_time":"2025-12-03T16:09:47.50672908Z","modified_time":"2025-12-03T15:59:29Z","sha256":"c6a11d4793a55b33f6c78fe238661a49d6cec2e24dde3cc4ae69580f3d78e688","source":"amazon-inspector","versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.0.7","1.0.8","1.0.6","1.0.9","1.1.9","1.2.9","1.2.10","1.2.11","1.2.12","1.2.13","1.2.14","1.2.15","1.2.16","1.2.17","1.2.21","1.2.19","1.2.18","1.2.20","1.2.22","1.2.23","1.2.24","1.2.25","1.2.26","1.2.27","1.2.28"]}]}}数据来源:OpenSSF Malicious Packages · Apache-2.0