2 matches found
Malicious Package
Overview chai-as-forgeted is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
9.8CVSS5.8AI score
SaveExploits0References2
Malicious code in chai-as-forgeted (npm)
Source: amazon-inspector b6b32b714919c755532ed3d2695d1966568c24878e9721a5d756896d81881020 Package name impersonates the popular chai-as-promised assertion library, but its package.json description and keywords are copied from pino and the code is unrelated to chai. The package's main entry export...
6.1AI score
SaveExploits0References4Affected Software1
20