elf-stats-caroling-hammer-382

MAL-2025-192480

npmmalware12/11/2025
Description

Malicious code in elf-stats-caroling-hammer-382 (npm)

Indicators of Compromise
SHA256 Hashes (3)
75ae01766f6069d949c5105a3d9df86cd024d2eeb5e48ef1566b7bcd5685b5e8
4c146884ef9fd7908359d68a21a79acc5c2b180b81e6f5cc4e9d677a9af5beb7
955d88c88fcb21161f7ff890ae1bc447a89bfc0bcecb05df8ac4248dd10f1fcf
References (1)
https://github.com/advisories/GHSA-pqq3-j2hh-3v3qOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/11/2025
Aliases
GHSA-pqq3-j2hh-3v3q
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001