VYPR
← All malware advisories

npm · Malicious package advisory

Malware

elf-stats-caroling-wreath-635

MAL-2025-192740

Malicious code in elf-stats-caroling-wreath-635 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (11aa67dca3eb18b0cdb659c23ee55e3e0b3c43655fc3cafae0c87f8b1da858ab)
The package elf-stats-caroling-wreath-635 was found to contain malicious code.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.