VYPR
← All malware advisories

npm · Malicious package advisory

Malware

elf-stats-caroling-workshop-885

MAL-2025-192483

Malicious code in elf-stats-caroling-workshop-885 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (2db8771c869601dd2f78c1ec9f6aba8fa7b5b059ebe97a5738a8a779466373f6)
The package elf-stats-caroling-workshop-885 was found to contain malicious code.

Compromised versions (7)

  • 5.4.3
  • 5.5.3
  • 5.6.3
  • 5.7.3
  • 5.8.3
  • 5.9.4
  • 5.9.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.