elf-stats-caroling-workshop-885

{"modified":"2025-12-23T17:09:49Z","published":"2025-12-11T19:46:09Z","schema_version":"1.7.4","id":"MAL-2025-192483","summary":"Malicious code in elf-stats-caroling-workshop-885 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (2db8771c869601dd2f78c1ec9f6aba8fa7b5b059ebe97a5738a8a779466373f6)\nThe package elf-stats-caroling-workshop-885 was found to contain malicious code.\n","affected":[{"package":{"ecosystem":"npm","name":"elf-stats-caroling-workshop-885"},"versions":["5.4.3","5.5.3","5.6.3","5.7.3","5.8.3","5.9.4","5.9.3"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"amazon-inspector","sha256":"2db8771c869601dd2f78c1ec9f6aba8fa7b5b059ebe97a5738a8a779466373f6","import_time":"2025-12-11T20:08:19.641870283Z","modified_time":"2025-12-11T19:46:09Z","versions":["5.4.3","5.5.3","5.6.3","5.7.3","5.8.3","5.9.4","5.9.3"]},{"source":"reversing-labs","sha256":"76c08d043f35bb3478e022d1452a12bbb05dc40405bdfac908453db14c9fbc07","import_time":"2025-12-23T17:07:52.101789128Z","id":"RLMA-2025-06145","modified_time":"2025-12-23T08:06:45Z","versions":["5.4.3","5.5.3","5.6.3","5.7.3","5.8.3","5.9.3","5.9.4"]}]}}