EUVD-2025-203521

Malicious code in elf-stats-nutmeg-sleigh-350 npm...

Malicious Package

Overview elf-stats-candlelit-nutcracker-184 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview elf-stats-evergreen-muffin-867 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview elf-stats-sugarplum-fireplace-278 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Authorization Bypass

Jenkins global-build-stats Plugin is vulnerable to Authorization Bypass. The vulnerability is due to missing permission checks in REST API endpoints, where the plugin exposes graph-related APIs without validating the caller’s authorization, and allows attackers with Overall/Read permission to...

Malicious code in elf-stats-candystriped-star-592 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd4d2dc0ed8289010246505ac7bb4ccadd0c16e8ac55be4ef787d20e4fa13e1 The package elf-stats-candystriped-star-592 was found to contain malicious code...

Malicious code in elf-stats-candlelit-nutcracker-184 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7d8e17f4dce63b128328d188d99c5ba0d664a6fdb2eb89dbc664935283f76a The package elf-stats-candlelit-nutcracker-184 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-202809

Malicious code in elf-stats-frostbitten-cookie-757 npm...

Malicious code in elf-stats-caroling-sled-530 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb5c6925e365e68bd75b3d27209a2af268f4deeebb86b0d64c93ee233202f8d The package elf-stats-caroling-sled-530 was found to contain malicious code...

Malicious code in elf-stats-midnight-rocket-499 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedc85815ec471eac6792ca730c4c4fad6ca00bd1a5b00de1ba99e7f8eb4d543 The package elf-stats-midnight-rocket-499 was found to contain malicious code...

Malicious code in elf-stats-mistletoe-mailbag-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619e1027592d0e7efb5310d110da5b344dc30eaf618c9a8e634948cf38b56d42 The package elf-stats-mistletoe-mailbag-834 was found to contain malicious code...

Malicious code in elf-stats-northbound-bauble-535 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f323fd31746abf20839d3b1eacfe2c6fc42097936ef8bb4f727be2ccf45350e The package elf-stats-northbound-bauble-535 was found to contain malicious code...

Malicious code in elf-stats-jolly-ornament-687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c696ff217f3b5fb230585fa3669d644df5d07b6d686687fa50639da0dbaacea7 The package elf-stats-jolly-ornament-687 was found to contain malicious code...

EUVD-2025-202786

Malicious code in elf-stats-rooftop-wishlist-723 npm...

Malicious code in elf-stats-festive-hollyberry-475 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e7d46a43990971116a5e7555e35061533751290efd4eb5220805a177ffc014 The package elf-stats-festive-hollyberry-475 was found to contain malicious code...

EUVD-2025-202825

Malicious code in elf-stats-cheery-muffin-949 npm...

Malicious code in elf-stats-merry-cookiejar-796 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbb603745bee341c6e65e345d4e8e33ec8b79e8822ead3250724c465af9bb37 The package elf-stats-merry-cookiejar-796 was found to contain malicious code...

EUVD-2025-202817

Malicious code in elf-stats-cranberry-saddlebag-402 npm...

MAL-2025-192483 Malicious code in elf-stats-caroling-workshop-885 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8771c869601dd2f78c1ec9f6aba8fa7b5b059ebe97a5738a8a779466373f6 The package elf-stats-caroling-workshop-885 was found to contain malicious code...

Malicious code in elf-stats-marzipan-nightcap-982 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1d00b97d1bd29964e9911023158c1b8d6859d3d2da73cc201ff9c1edce509d The package elf-stats-marzipan-nightcap-982 was found to contain malicious code...