MAL-2025-192770

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-ginger-bow-370/MAL-2025-192770.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2025-192770
Published
2025-12-23T08:08:02Z
Modified
2025-12-24T01:08:54.779601Z
Summary
Malicious code in elf-stats-ginger-bow-370 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (13f5fae5b149d0de09927386835d91378074a0b83000ff8a5fe91f1000aa3fd7)

The package elf-stats-ginger-bow-370 was found to contain malicious code.

Database specific 
{
    "malicious-packages-origins": [
        {
            "versions": [
                "99.9.9",
                "100.9.1",
                "200.3.50",
                "200.4.50",
                "250.4.50"
            ],
            "id": "RLMA-2025-06198",
            "modified_time": "2025-12-23T08:08:02Z",
            "import_time": "2025-12-23T20:07:22.509643316Z",
            "sha256": "518b72eb9ce5fecab9b4df19883f91c644c7593b78402cb5a7103b8cd87e6940",
            "source": "reversing-labs"
        },
        {
            "versions": [
                "99.9.9",
                "100.9.1",
                "200.3.50",
                "200.4.50",
                "250.4.50"
            ],
            "import_time": "2025-12-24T00:51:37.384542218Z",
            "modified_time": "2025-12-24T00:41:11Z",
            "sha256": "13f5fae5b149d0de09927386835d91378074a0b83000ff8a5fe91f1000aa3fd7",
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / elf-stats-ginger-bow-370

Package

Name
elf-stats-ginger-bow-370
View open source insights on deps.dev
Purl
pkg:npm/elf-stats-ginger-bow-370

Affected ranges

Affected versions

99.*
99.9.9
100.*
100.9.1
200.*
200.3.50
200.4.50
250.*
250.4.50

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-ginger-bow-370/MAL-2025-192770.json"