Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•21 views

Malicious Package

Overview chai-as-forgeted is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•6 views

Malicious code in chai-as-forgeted (npm)

Source: amazon-inspector b6b32b714919c755532ed3d2695d1966568c24878e9721a5d756896d81881020 Package name impersonates the popular chai-as-promised assertion library, but its package.json description and keywords are copied from pino and the code is unrelated to chai. The package's main entry export...

6.1AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder