VYPR
← All malware advisories

npm · Malicious package advisory

Malware

elf-stats-holly-wishlist-355

MAL-2025-192247

Malicious code in elf-stats-holly-wishlist-355 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (41e0c429b06d32a3305146696361a2e24fc3e07803892f5b678f3a3de638e102)
The package elf-stats-holly-wishlist-355 was found to contain malicious code.

Compromised versions (2)

  • 1.0.0
  • 1.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.