npm
Malicious elf-stats-caroling-toy-109 @99.0.1
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 11:32 AM UTC
OSV ID
MAL-2025-192002
Ecosystem
npm
Summary
The package elf-stats-caroling-toy-109 was found to contain malicious code.
Source: amazon-inspector (6fff52bb6f322020f179d6ddaf8ae6277ef06c64dbb9d2e2aa506aa5b8c5c45f)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.