elf-stats-ginger-reindeer-411

{"modified":"2025-12-23T20:09:23Z","published":"2025-12-03T16:00:57Z","schema_version":"1.7.4","id":"MAL-2025-192212","summary":"Malicious code in elf-stats-ginger-reindeer-411 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (e84f894c73cc87f3c17783b05c4325ebd5d6196490e100c45ff938bf075fd861)\nThe package elf-stats-ginger-reindeer-411 was found to contain malicious code.\n\n## Source: ossf-package-analysis (5ec87318cd6f874f08eb6015b33602d14aa7ecbaeadd01d7d21e45ac8a17d399)\nThe OpenSSF Package Analysis project identified 'elf-stats-ginger-reindeer-411' @ 1.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package executes one or more commands associated with malicious behavior.\n","affected":[{"package":{"ecosystem":"npm","name":"elf-stats-ginger-reindeer-411"},"versions":["1.0.1"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"amazon-inspector","sha256":"e84f894c73cc87f3c17783b05c4325ebd5d6196490e100c45ff938bf075fd861","import_time":"2025-12-03T17:40:19.76151823Z","modified_time":"2025-12-03T17:22:10Z","versions":["1.0.1"]},{"source":"ossf-package-analysis","sha256":"5ec87318cd6f874f08eb6015b33602d14aa7ecbaeadd01d7d21e45ac8a17d399","import_time":"2025-12-04T00:27:06.046707682Z","modified_time":"2025-12-03T16:00:57Z","versions":["1.0.1"]},{"source":"reversing-labs","sha256":"6cb77993b9a864dd589157c5abe48a36b90f5c6d4f2d51eba0bebdf15968cfb8","import_time":"2025-12-23T20:07:22.964924394Z","id":"RLMA-2025-06202","modified_time":"2025-12-23T08:08:06Z","versions":["1.0.1"]}]}}