elf-stats-candlelit-nutcracker-184

MAL-2025-192472

npmmalware12/11/2025
Description

Malicious code in elf-stats-candlelit-nutcracker-184 (npm)

Indicators of Compromise
SHA256 Hashes (3)
7e7d8e17f4dce63b128328d188d99c5ba0d664a6fdb2eb89dbc664935283f76a
f361cdbb3caf2dda203b05cbbac5f533f8a076516acda7417758db19fc4abad1
e05531e5a655e112e242dabea0b83d0a9138c2e72e86b74b13bf8870b66da17a
References (3)
https://github.com/advisories/GHSA-gpm8-w66h-gj7pOSVhttps://security.snyk.io/vuln/SNYK-JS-ELFSTATSCANDLELITNUTCRACKER184-14417288OSVhttps://npmjs.com/package/elf-stats-candlelit-nutcracker-184OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/11/2025
Aliases
GHSA-gpm8-w66h-gj7pSNYK-JS-ELFSTATSCANDLELITNUTCRACKER184-14417288
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001