CVE-2025-13513

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Malicious code in elf-stats-northbound-sparkler-410 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08736c2162a48e541984d90b3b871f1be3f37ce290cb43fce03b7af871d6804 The package elf-stats-northbound-sparkler-410 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192304 Malicious code in elf-stats-northbound-sparkler-410 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08736c2162a48e541984d90b3b871f1be3f37ce290cb43fce03b7af871d6804 The package elf-stats-northbound-sparkler-410 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201289

Malicious code in elf-stats-northbound-sparkler-410 npm...

Malicious code in elf-stats-snowdusted-cookiejar-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2480ce9c2a166238de101bac9cb648e0ba2a3b60bb4c0adef110d95d1a701797 The package elf-stats-snowdusted-cookiejar-250 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-caroling-wishlist-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e The package elf-stats-caroling-wishlist-626 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192369 Malicious code in elf-stats-caroling-wishlist-626 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e The package elf-stats-caroling-wishlist-626 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192303 Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201159

Malicious code in elf-stats-ginger-wreath-646 npm...

Malicious code in elf-stats-ginger-wreath-646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0736ed9611847ba4c5416cd0bd8ba33bae114769eec8947e7d58c85c3ce100c1 The package elf-stats-ginger-wreath-646 was found to contain malicious code. Source: ossf-package-analysis...

Malicious Package

Overview elf-stats-piney-icicle-501 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview elf-stats-ginger-icicle-707 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview elf-stats-mulled-stocking-538 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview elf-stats-mulled-ornament-810 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-201148

Malicious code in elf-stats-marzipan-cocoa-562 npm...

EUVD-2025-201149

Malicious code in elf-stats-candlelit-marshmallow-663 npm...

Malicious code in elf-stats-mulled-ornament-810 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a68193ecbc69141a7ed610f69110b64551adf4ac175894416841205703c9db3 The package elf-stats-mulled-ornament-810 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192301 Malicious code in elf-stats-mulled-ornament-810 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a68193ecbc69141a7ed610f69110b64551adf4ac175894416841205703c9db3 The package elf-stats-mulled-ornament-810 was found to contain malicious code. Source: ghsa-malware...