Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview chai-as-predicted is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•6 views

Malicious code in chai-as-predicted (npm)

Source: amazon-inspector fd7a2ff71dd341d02986c8185ea9eb18196b782f0efd9103859c0493c9f4cc78 Package name 'chai-as-predicted' impersonates the popular 'chai-as-promised' assertion library, but ships unrelated code disguised as pino logger internals. The exported middleware in index.js spawns a...

6.5AI score
SaveExploits0References4Affected Software1
osv_mal
osv_mal
•added 2026/06/24 2:04 p.m.•26 views

MAL-2026-6393 Malicious code in chai-as-predicted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7a2ff71dd341d02986c8185ea9eb18196b782f0efd9103859c0493c9f4cc78 Package name 'chai-as-predicted' impersonates the popular 'chai-as-promised' assertion library, but ships unrelated code disguised as pino logger...

6.2AI score
SaveExploits0References1
Rows per page
Query Builder