2 matches found
Malicious Package
Overview chai-plugin-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
9.8CVSS5.5AI score
SaveExploits0References2
MAL-2026-5906 Malicious code in chai-plugin-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26567b08d635c9b26d6befaba3dfc61a957bcf295cb321d03025b39bc54890ad Package republishes the chai source tree under the confusable name chai-plugin-kit. The package's main entry index.js spawns a detached, stdio-silenc...
5.4AI score
SaveExploits0References1
20