MAL-2025-192788

    Dashboard / Malicious Package / MAL-2025-192788

    MAL-2025-192788

    Published: 23 Dec 2025Last Modified: 1 Sept 2026Aliases: 
    GHSA-q5j9-hg66-r57r

    Summary: Malicious code in elf-stats-sparkly-train-831 (npm)

    Details: Source: amazon-inspector (ef02a08dfe80a4226f18e2451ab736a95db862186a438fdb7e2837624dbecbd8) The package elf-stats-sparkly-train-831 was found to contain malicious code.

    References: https://github.com/advisories/GHSA-q5j9-hg66-r57r

    Affected packages

    Package

    Name: elf-stats-sparkly-train-831

    Purl: pkg:npm/elf-stats-sparkly-train-831

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.6
    1.0.9
    1.0.3
    1.0.5
    1.0.7
    MAL-2025-192788 | CVE-DB