MAL-2026-7240 Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7239 Malicious code in chai-as-sai (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7238 Malicious code in chai-as-purified (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7237 Malicious code in chai-as-patched (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7236 Malicious code in chai-as-legit (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7235 Malicious code in chai-as-launched (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7234 Malicious code in chai-as-informed (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7233 Malicious code in chai-as-consisted (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7232 Malicious code in chai-as-commited (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7231 Malicious code in chai-as-belonged (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7230 Malicious code in chai-as-absorbed (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-spycore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb99516f251bbd13baae5273239a6a04acefea76ddf1a7b06f4b5a328339dae Package republishes the chai-spies Chai plugin source verbatim including original author header under the near-identical name chai-spycore...

MAL-2026-6907 Malicious code in chai-spycore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb99516f251bbd13baae5273239a6a04acefea76ddf1a7b06f4b5a328339dae Package republishes the chai-spies Chai plugin source verbatim including original author header under the near-identical name chai-spycore...

MAL-2026-6827 Malicious code in chai-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e0814b168c19eced65c482efd2ccec185224474b7fbc0e47a2a3ab8fb3a5100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chai-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e0814b168c19eced65c482efd2ccec185224474b7fbc0e47a2a3ab8fb3a5100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chai-as-persisted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf9c49450e0fa0d47be1b6ae27991f844868ff6c435d2082948b5feae862709 The package's postinstall script npm run smoke:pino executes index.js, which spawns a detached node lib/initializeCaller.js child. That module hides...

MAL-2026-6544 Malicious code in chai-as-persisted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf9c49450e0fa0d47be1b6ae27991f844868ff6c435d2082948b5feae862709 The package's postinstall script npm run smoke:pino executes index.js, which spawns a detached node lib/initializeCaller.js child. That module hides...

Malicious code in chai-as-assured (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd28efd7a3d07f87ec22556cc25a8c07117fa4cdd237c6cb1db750c976a11836 chai-as-assured impersonates the popular chai-as-promised package matching README, author, and API surface. When the exported plugin function is...

MAL-2026-6532 Malicious code in chai-as-assured (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd28efd7a3d07f87ec22556cc25a8c07117fa4cdd237c6cb1db750c976a11836 chai-as-assured impersonates the popular chai-as-promised package matching README, author, and API surface. When the exported plugin function is...

MAL-2026-6497 Malicious code in chai-as-synced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be17d22b28dc53ea46085190c1f5ff11ae16ce4b80539162d68c2ad2b224158e [email protected] impersonates the pino logger: it ships pino's README, LICENSE, docs/, index.d.ts and lib/ file layout proto.js, levels.js,...