Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•20 views

Malicious Package

Overview chai-plugin-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/06/16 4:22 p.m.•21 views

MAL-2026-5906 Malicious code in chai-plugin-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26567b08d635c9b26d6befaba3dfc61a957bcf295cb321d03025b39bc54890ad Package republishes the chai source tree under the confusable name chai-plugin-kit. The package's main entry index.js spawns a detached, stdio-silenc...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder