elf-stats-sparkly-train-831

{"schema_version":"1.7.4","id":"MAL-2025-192788","published":"2025-12-23T08:10:48Z","modified":"2026-09-01T11:20:26.070224343Z","aliases":["GHSA-q5j9-hg66-r57r"],"summary":"Malicious code in elf-stats-sparkly-train-831 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ef02a08dfe80a4226f18e2451ab736a95db862186a438fdb7e2837624dbecbd8)\nThe package elf-stats-sparkly-train-831 was found to contain malicious code.\n","affected":[{"package":{"name":"elf-stats-sparkly-train-831","ecosystem":"npm","purl":"pkg:npm/elf-stats-sparkly-train-831"},"versions":["1.0.6","1.0.9","1.0.3","1.0.5","1.0.7"]}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q5j9-hg66-r57r"}],"database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-06301","import_time":"2025-12-23T21:36:18.283690674Z","modified_time":"2025-12-23T08:10:48Z","sha256":"897b3eff9179de5f32dbb12574751010cbb4b43b5300be9ca638801bfe8c0c0f","source":"reversing-labs","versions":["1.0.6","1.0.9"]},{"import_time":"2025-12-24T00:51:37.143060121Z","modified_time":"2025-12-24T00:41:11Z","sha256":"ef02a08dfe80a4226f18e2451ab736a95db862186a438fdb7e2837624dbecbd8","source":"amazon-inspector","versions":["1.0.6","1.0.9"]},{"id":"RLUA-2026-05066","import_time":"2026-07-09T09:17:06.825695029Z","modified_time":"2026-07-07T12:48:50Z","sha256":"c8d557d0652c463e0b4cac8e1a2f16df06ab8c7c548dd98768ba7a7d32951802","source":"reversing-labs","versions":["1.0.3","1.0.5","1.0.7"]},{"id":"RLUA-2026-06206","import_time":"2026-09-01T11:18:04.069010464Z","modified_time":"2026-08-24T16:49:00Z","sha256":"3c0ba20ef841af4593839048f64eb94d62ac140a4ba3a1ae68aca3c14c3a6590","source":"reversing-labs"}]},"credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}