MAL-2025-192334

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-midnight-rocket-813/MAL-2025-192334.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192334
Published
2025-12-05T21:10:10Z
Modified
2025-12-23T23:09:15Z
Summary
Malicious code in elf-stats-midnight-rocket-813 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (ff097f7c813e420b8136ad3caa145a545e08d315d7f9125f824b2a3607c4ae88)

The package elf-stats-midnight-rocket-813 was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "import_time": "2025-12-05T21:36:15.80221082Z",
            "modified_time": "2025-12-05T21:10:10Z",
            "sha256": "ff097f7c813e420b8136ad3caa145a545e08d315d7f9125f824b2a3607c4ae88",
            "source": "amazon-inspector",
            "versions": [
                "2.0.0",
                "2.1.0"
            ]
        },
        {
            "id": "RLMA-2025-06237",
            "import_time": "2025-12-23T20:38:59.174437578Z",
            "modified_time": "2025-12-23T08:09:04Z",
            "sha256": "f3e3f8890b5013320b1e01da6eae1e28e96137e77908f2e593cf7f31de138bff",
            "source": "reversing-labs",
            "versions": [
                "2.1.0"
            ]
        }
    ]
}
Credits

Affected packages

npm / elf-stats-midnight-rocket-813

Package

Name
elf-stats-midnight-rocket-813
View open source insights on deps.dev
Purl
pkg:npm/elf-stats-midnight-rocket-813

Affected ranges

Affected versions

2.*
2.0.0
2.1.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-midnight-rocket-813/MAL-2025-192334.json"