npm

elf-stats-caroling-wreath-635 @1.0.0

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 10:32 AM UTC

Malicious

OSV ID

MAL-2025-192740

Ecosystem

npm

Summary

The package elf-stats-caroling-wreath-635 was found to contain malicious code.

Source: amazon-inspector (11aa67dca3eb18b0cdb659c23ee55e3e0b3c43655fc3cafae0c87f8b1da858ab)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.