EUVD-2025-111830

Malicious code in leda-npm-chai-sync npm...

EUVD-2025-123516

Malicious code in postcss-loader-pegasus-registry-chai npm...

Malicious Package

Overview async-chai is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...