MAL-2025-192503

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-fuzzy-workbench-102/MAL-2025-192503.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192503
Published
2025-12-11T19:46:09Z
Modified
2026-03-19T12:43:37.584113Z
Summary
Malicious code in elf-stats-fuzzy-workbench-102 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (6885087c0bc44815f87570e3ea126e735bb65b5f4cb443a1adc04915c7ac8959)

The package elf-stats-fuzzy-workbench-102 was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "source": "amazon-inspector",
            "import_time": "2025-12-11T20:08:19.683557702Z",
            "modified_time": "2025-12-11T19:46:09Z",
            "versions": [
                "2.0.0"
            ],
            "sha256": "6885087c0bc44815f87570e3ea126e735bb65b5f4cb443a1adc04915c7ac8959"
        },
        {
            "modified_time": "2026-03-18T12:48:39Z",
            "source": "reversing-labs",
            "import_time": "2026-03-19T12:18:48.549671554Z",
            "id": "RLMA-2026-01280",
            "versions": [
                "2.0.0"
            ],
            "sha256": "87c9b17e092a85edd28070441b15a7e2d44bf2c07ed6d2a23b58e118d2f72c3e"
        }
    ]
}
References
Credits

Affected packages

npm / elf-stats-fuzzy-workbench-102

Package

Name
elf-stats-fuzzy-workbench-102
View open source insights on deps.dev
Purl
pkg:npm/elf-stats-fuzzy-workbench-102

Affected ranges

Affected versions

2.*
2.0.0

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-fuzzy-workbench-102/MAL-2025-192503.json"