npm
Malicious elf-stats-candystriped-bauble-740 @1.0.3
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC
OSV ID
MAL-2025-192474
Ecosystem
npm
Summary
The package elf-stats-candystriped-bauble-740 was found to contain malicious code.
Source: amazon-inspector (214abc58af16ef2f2158bd3fb8d4a66df3bd15d15d2780f300231fccc082a457)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.