Malicious code in elf-stats-snowdusted-chimney-406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86a6efef2f245df6129dd6f2942074a1f09f4a587b963499865455bddb47fbf The package elf-stats-snowdusted-chimney-406 was found to contain malicious code...

MAL-2025-192333 Malicious code in elf-stats-lanternlit-saddlebag-279 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fe295c9017f7da0ef4b1fe47a7a422c26c794229397b63d9ea7711f26a4591 The package elf-stats-lanternlit-saddlebag-279 was found to contain malicious code...

MAL-2025-192329 Malicious code in elf-stats-cosy-toy-308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca3af23bbfec4f6a8b388056bdca1e75940f84912fc3413aa6f6ef991997df5 The package elf-stats-cosy-toy-308 was found to contain malicious code...

EUVD-2025-201478

Malicious code in elf-stats-shimmering-toolkit-483 npm...

MAL-2025-192327 Malicious code in elf-stats-candystriped-garland-735 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18145cfa522b714f5a007a20544d2cad67fb9f9203ede1fec744cf537183b24 The package elf-stats-candystriped-garland-735 was found to contain malicious code...

MAL-2025-192326 Malicious code in elf-stats-candlelit-hollyberry-248 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48c0580ac5b5930d0998a8fd8750cd281babbb29ef73f9ecf04334f5a8ecd0 The package elf-stats-candlelit-hollyberry-248 was found to contain malicious code...

EUVD-2025-201485

Malicious code in elf-stats-evergreen-satchel-264 npm...

MAL-2025-192332 Malicious code in elf-stats-flickering-lantern-502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc613b513833195464938e6e5c51e891b1a9978f9648ee11ec41bb76519e2d2 The package elf-stats-flickering-lantern-502 was found to contain malicious code...

Malicious code in elf-stats-tinsel-muffin-395 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a656faa46cdf0ceaaa9659c09ead8312760eccefa700a36a72bb7ae3eae1186d The package elf-stats-tinsel-muffin-395 was found to contain malicious code...

CVE-2025-13513

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Malicious code in elf-stats-northbound-sparkler-410 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08736c2162a48e541984d90b3b871f1be3f37ce290cb43fce03b7af871d6804 The package elf-stats-northbound-sparkler-410 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192304 Malicious code in elf-stats-northbound-sparkler-410 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08736c2162a48e541984d90b3b871f1be3f37ce290cb43fce03b7af871d6804 The package elf-stats-northbound-sparkler-410 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201289

Malicious code in elf-stats-northbound-sparkler-410 npm...

Malicious code in elf-stats-snowdusted-cookiejar-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2480ce9c2a166238de101bac9cb648e0ba2a3b60bb4c0adef110d95d1a701797 The package elf-stats-snowdusted-cookiejar-250 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-caroling-wishlist-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e The package elf-stats-caroling-wishlist-626 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192369 Malicious code in elf-stats-caroling-wishlist-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e The package elf-stats-caroling-wishlist-626 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192303 Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201159

Malicious code in elf-stats-ginger-wreath-646 npm...

Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

Malicious Package

Overview elf-stats-piney-icicle-501 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...