elf-stats-rooftop-stockpile-626

MAL-2025-191977

npmmalware12/3/2025
Description

Malicious code in elf-stats-rooftop-stockpile-626 (npm)

Indicators of Compromise
SHA256 Hashes (7)
06e60541ac3cc70911f6bca7b44a7e704fd1d09521ec5952dfdda4d236c2ffd7
15638b9d15b9b3da9833444002783de05854d6cef14ee04083f025f9ff4f4d6a
1e7cdd724df3b3fdd7f1a5a904c8306241ff7854fa25d4950a488c15b9c85651
20d5b9db53e89ba30430dcab38177cbcd238afa01cd1a5624650e1d695fbd5ae
332278778e8f7c4c639d77e5e9856aa1efe7210d6b1787f41997339f70f5efea
622aee3911b5ec5db773b6bbc74a9c0b117cf885bf25ec253474ad7ecb65054d
c42e9ccd6f37616b569f3cda8911680025a0aa278dae21cd81c7e24c86841df9
References (1)
https://github.com/advisories/GHSA-3hg9-rgh9-x5j4OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/3/2025
Aliases
GHSA-3hg9-rgh9-x5j4
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001