Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•6 views

Malicious code in chai-beta (npm)

chai-beta is a malicious npm package that when imported downloads a C2 dropper from https://jsonkeeper.com/b/XRGF3 and executes it similar to malware in to chai-await-test. Source: amazon-inspector b57727c6a080ac8eccf4106639fc8fceab20fd4fb96142c8a8cb9b68422d4867 The package chai-beta was found to...

5.8AI score
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2026/06/03 9:00 p.m.•23 views

Malicious Package

Overview chai-beta is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/04/15 10:05 p.m.•25 views

MAL-2026-2897 Malicious code in chai-beta (npm)

chai-beta is a malicious npm package that when imported downloads a C2 dropper from https://jsonkeeper.com/b/XRGF3 and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

5.7AI score
SaveExploits0References3
Rows per page
Query Builder