elf-stats-festive-sparkler-275

MAL-2025-192294

npmmalware12/4/2025
Description

Malicious code in elf-stats-festive-sparkler-275 (npm)

Indicators of Compromise
SHA256 Hashes (5)
e118633889a307914cb4954e0f154bf6e3369dad3901c57fec4a08667e7af4a8
f3adaeddf56adca42174e060e74d72cba7c7afff543772ffc7037f6329fe0359
458906fe6d41be31cecbaf8872f7fc8715d8f4a838373dee7798e5c3ce066bec
fd8ba0eb7e58cb06bc322ae50b4432eedb2f04ca0b5b2edc00dbb20418556248
c05aec9b15ceed4b03ab7714e2797a78ab68acb551897cfb24c0950391db6faa
References (1)
https://github.com/advisories/GHSA-cqjm-gc5c-7gh9OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/4/2025
Aliases
GHSA-cqjm-gc5c-7gh9
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001