npm

elf-stats-caroling-wishlist-626 @2.0.1

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC

Malicious

OSV ID

MAL-2025-192369

Ecosystem

npm

Summary

The package elf-stats-caroling-wishlist-626 was found to contain malicious code.

Source: amazon-inspector (5ff553f8337da6d0bc56a29ed6adb190407c29586610823cb3336ed18c35aa2e)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.