MAL-2026-10607 Malicious code in chai-as-act (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf85a5e85f183a28cc32ff39ddcc68ef15b698cc62eccfaa89dd1bb80c709f6 The package masquerades as a chai plugin but ships the pino logger source tree plus an additional payload file lib/initializeCaller.js. That file is ...

MAL-2026-10519 Malicious code in chai-as-sets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62935357bb620be6ade887e298b5e5bbd6bff0b7a171a79f852d19c58142da4 The package name and description advertise a chai plugin, but the main entry point spawns a detached child process lib/initializeCaller.js when the...

MAL-2026-5905 Malicious code in chai-plugin-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf8b1cc2e3c780dc0ac44e7691f14f2031f0aca1e1c207f1c15c0815471358b chai-plugin-helper poses as a chai plugin and ships a verbatim copy of chai's public API index.js, lib/chai.js, expect/should/assert exports, version...

MAL-2026-5906 Malicious code in chai-plugin-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26567b08d635c9b26d6befaba3dfc61a957bcf295cb321d03025b39bc54890ad Package republishes the chai source tree under the confusable name chai-plugin-kit. The package's main entry index.js spawns a detached, stdio-silenc...

MAL-2026-5904 Malicious code in chai-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e08b149ec19ba5622783cfdf864741264b5f6cbe5f56a15c8553c6f1ab5106 Package name chai-plugin impersonates the popular chai assertion library — README and copyright headers reference chaijs.com / chaijs/chai, but the...

Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...