MAL-2025-192161

Import Source

https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-starlit-mitten-980/MAL-2025-192161.json

JSON Data

https://api.osv.dev/v1/vulns/MAL-2025-192161

Published

2025-12-03T15:59:29Z

Modified

2025-12-03T16:18:55.254584Z

Summary

Malicious code in elf-stats-starlit-mitten-980 (npm)

Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (c6a11d4793a55b33f6c78fe238661a49d6cec2e24dde3cc4ae69580f3d78e688)

The package elf-stats-starlit-mitten-980 was found to contain malicious code.

Database specific

{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-03T16:09:47.50672908Z",
            "modified_time": "2025-12-03T15:59:29Z",
            "source": "amazon-inspector",
            "sha256": "c6a11d4793a55b33f6c78fe238661a49d6cec2e24dde3cc4ae69580f3d78e688",
            "versions": [
                "1.0.0",
                "1.0.1",
                "1.0.2",
                "1.0.3",
                "1.0.4",
                "1.0.5",
                "1.0.7",
                "1.0.8",
                "1.0.6",
                "1.0.9",
                "1.1.9",
                "1.2.9",
                "1.2.10",
                "1.2.11",
                "1.2.12",
                "1.2.13",
                "1.2.14",
                "1.2.15",
                "1.2.16",
                "1.2.17",
                "1.2.21",
                "1.2.19",
                "1.2.18",
                "1.2.20",
                "1.2.22",
                "1.2.23",
                "1.2.24",
                "1.2.25",
                "1.2.26",
                "1.2.27",
                "1.2.28"
            ]
        }
    ]
}

References

Credits

- Amazon Inspector - FINDER
- - actran@amazon.com

Affected packages

npm / elf-stats-starlit-mitten-980

Package

Name: elf-stats-starlit-mitten-980; View open source insights on deps.dev
Purl: pkg:npm/elf-stats-starlit-mitten-980

Affected ranges

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1.9

1.2.9

1.2.10

1.2.11

1.2.12

1.2.13

1.2.14

1.2.15

1.2.16

1.2.17

1.2.18

1.2.19

1.2.20

1.2.21

1.2.22

1.2.23

1.2.24

1.2.25

1.2.26

1.2.27

1.2.28

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-starlit-mitten-980/MAL-2025-192161.json"