Malicious code in elf-stats-twinkling-ribbon-344 (npm)

Source: amazon-inspector 4a4c9eb38abc668e7c9332e8d230efe3435594c7d8d0b82695d2cfcbdb087a93 The package elf-stats-twinkling-ribbon-344 was found to contain malicious code. Source: ossf-package-analysis 5f610be527e0e607850bc953e32fae4c393445ae30fb37e7f81fbe7275a8b93f The OpenSSF Package Analysis...

Malicious code in elf-stats-sugarplum-ribbon-151 (npm)

Source: amazon-inspector b5d44534b09d5d079b2943ce534b32c32b8af9028ea3af4f44ff8ec867da0c44 The package elf-stats-sugarplum-ribbon-151 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-starlit-ribbon-255 (npm)

Source: amazon-inspector ab737733063151f587ed67c238187c2c8832c3a5bead8f0140d93e58143a9742 The package elf-stats-starlit-ribbon-255 was found to contain malicious code. Source: ossf-package-analysis bef0ccef87d7ce48e221062c23c6d5f822885eed6eb3d7b3b619b55c71a0101b The OpenSSF Package Analysis proje...

Malicious code in elf-stats-joyous-ribbon-819 (npm)

Source: amazon-inspector 6b1789218ed605d15187ed65aba19126ac05248ba7a807cba8d20b557215350d The package elf-stats-joyous-ribbon-819 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-fuzzy-ribbon-205 (npm)

Source: amazon-inspector 570b78a08c94256abf8b4e8f351260385791a4790247119381e32402e98c453b The package elf-stats-fuzzy-ribbon-205 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-frostbitten-ribbon-950 (npm)

Source: amazon-inspector 92ad37754211401d834761bc3d0bbf690a96b2469e233f72f5e9f07777d9b780 The package elf-stats-frostbitten-ribbon-950 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cocoa-ribbon-476 (npm)

Source: amazon-inspector 005ed1613dc4777b86a0449d32f014ea40f1ab9237ebd84bed9d955cdbaefd56 The package elf-stats-cocoa-ribbon-476 was found to contain malicious code. Source: ossf-package-analysis 4634f9dee93f806a074705a1dcdcb30d630fa3a68ea61bc2c2d4e9a9510128af The OpenSSF Package Analysis project...

Malicious code in elf-stats-fuzzy-ribbon-874 (npm)

--- Credit: OpenSSF source...

io.micronaut.configuration:micronaut-aws-common (1.0.2), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.2) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.2)

io.micronaut:micronaut-http-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.2 -...

io.micronaut.configuration:micronaut-aws-common (1.0.1), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.1) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.1)

io.micronaut:micronaut-http-client MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.1 -...

io.micronaut.configuration:micronaut-netflix-ribbon (1.1.0), io.micronaut.configuration:micronaut-security-oauth2 (>=1.3.0, <=1.3.1) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.3.0)

io.micronaut:micronaut-http-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-netflix-ribbon 1.1.0 -...

io.micronaut.configuration:micronaut-aws-common (1.0.0), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.0) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.0)

io.micronaut:micronaut-http-client MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.0 -...

io.micronaut.configuration:micronaut-aws-common (1.0.0.rc3), io.micronaut.configuration:micronaut-netflix-ribbon (1.0.0.rc3) +3 more potentially affected by unknown CVE via io.micronaut:micronaut-http-client (1.0.0.rc3)

io.micronaut:micronaut-http-client MAVEN version 1.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-client and may be impacted: - io.micronaut.configuration:micronaut-aws-common 1.0.0.rc3 -...

MAL-2026-7262 Malicious code in elf-stats-fuzzy-ribbon-874 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in elf-stats-fuzzy-ribbon-874 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview digital-music-dynmsg-ribbon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malware in digital-music-dynmsg-ribbon

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in elf-stats-fuzzy-ribbon-205 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b78a08c94256abf8b4e8f351260385791a4790247119381e32402e98c453b The package elf-stats-fuzzy-ribbon-205 was found to contain malicious code...

EUVD-2025-204906

Malicious code in elf-stats-fuzzy-ribbon-205 npm...

MAL-2025-192769 Malicious code in elf-stats-fuzzy-ribbon-205 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570b78a08c94256abf8b4e8f351260385791a4790247119381e32402e98c453b The package elf-stats-fuzzy-ribbon-205 was found to contain malicious code...