elf-stats-sugarplum-mitten-141

MAL-2025-192449

npmmalware12/11/2025
Description

Malicious code in elf-stats-sugarplum-mitten-141 (npm)

Indicators of Compromise
SHA256 Hashes (2)
abe2b5ed5ab130378db923b0c43eeb9e041a1dcc51641d1fbdbc2463e69da21a
615a5ec144610c9e9d39bc2e2e362b6b908903e21b9fa43b648c5ea90cf86e0b
References (1)
https://github.com/advisories/GHSA-pq84-52r2-cmvmOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/11/2025
Aliases
GHSA-pq84-52r2-cmvm
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001