{"id":"MAL-2025-192788","summary":"Malicious code in elf-stats-sparkly-train-831 (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (ef02a08dfe80a4226f18e2451ab736a95db862186a438fdb7e2837624dbecbd8)\nThe package elf-stats-sparkly-train-831 was found to contain malicious code.\n","aliases":["GHSA-q5j9-hg66-r57r"],"modified":"2026-09-01T11:31:06.737459233Z","published":"2025-12-23T08:10:48Z","database_specific":{"malicious-packages-origins":[{"id":"RLMA-2025-06301","import_time":"2025-12-23T21:36:18.283690674Z","modified_time":"2025-12-23T08:10:48Z","sha256":"897b3eff9179de5f32dbb12574751010cbb4b43b5300be9ca638801bfe8c0c0f","source":"reversing-labs","versions":["1.0.6","1.0.9"]},{"sha256":"ef02a08dfe80a4226f18e2451ab736a95db862186a438fdb7e2837624dbecbd8","source":"amazon-inspector","versions":["1.0.6","1.0.9"],"import_time":"2025-12-24T00:51:37.143060121Z","modified_time":"2025-12-24T00:41:11Z"},{"id":"RLUA-2026-05066","import_time":"2026-07-09T09:17:06.825695029Z","modified_time":"2026-07-07T12:48:50Z","sha256":"c8d557d0652c463e0b4cac8e1a2f16df06ab8c7c548dd98768ba7a7d32951802","source":"reversing-labs","versions":["1.0.3","1.0.5","1.0.7"]},{"import_time":"2026-09-01T11:18:04.069010464Z","modified_time":"2026-08-24T16:49:00Z","sha256":"3c0ba20ef841af4593839048f64eb94d62ac140a4ba3a1ae68aca3c14c3a6590","source":"reversing-labs","id":"RLUA-2026-06206"}]},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q5j9-hg66-r57r"}],"affected":[{"package":{"name":"elf-stats-sparkly-train-831","ecosystem":"npm","purl":"pkg:npm/elf-stats-sparkly-train-831"},"versions":["1.0.6","1.0.9","1.0.3","1.0.5","1.0.7"],"database_specific":{"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/elf-stats-sparkly-train-831/MAL-2025-192788.json"}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["actran@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"}]}