{"id":"MAL-2025-192264","summary":"Malicious code in elf-stats-rooftop-cocoa-966 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (4a90784b5d927f8ff7ae1c7c517b9cf90d6692190042a9f39b54dc42fd6c59d5)\nThe package elf-stats-rooftop-cocoa-966 was found to contain malicious code.\n","modified":"2025-12-23T21:37:22.759848Z","published":"2025-12-03T18:48:03Z","database_specific":{"malicious-packages-origins":[{"import_time":"2025-12-03T19:07:15.166452324Z","modified_time":"2025-12-03T18:48:03Z","sha256":"4a90784b5d927f8ff7ae1c7c517b9cf90d6692190042a9f39b54dc42fd6c59d5","source":"amazon-inspector","versions":["1.0.1"]},{"id":"RLMA-2025-06256","import_time":"2025-12-23T21:06:53.246029874Z","modified_time":"2025-12-23T08:09:35Z","sha256":"7291983bb97fcf032b9b3d920dc1534a57e6facc294aaa3d34ad58cb383eebac","source":"reversing-labs","versions":["1.0.1"]}]},"affected":[{"package":{"name":"elf-stats-rooftop-cocoa-966","ecosystem":"npm","purl":"pkg:npm/elf-stats-rooftop-cocoa-966"},"versions":["1.0.1"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-rooftop-cocoa-966/MAL-2025-192264.json"}}],"schema_version":"1.7.3","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}