npm

elf-stats-cocoa-ribbon-476 @3.0.0

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC

Malicious

OSV ID

MAL-2025-192203

Ecosystem

npm

Summary

The package elf-stats-cocoa-ribbon-476 was found to contain malicious code.

Source: amazon-inspector (005ed1613dc4777b86a0449d32f014ea40f1ab9237ebd84bed9d955cdbaefd56)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.