Malicious Package

Overview chai-plugin-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in chai-plugin-helper (npm)

Source: amazon-inspector ddf8b1cc2e3c780dc0ac44e7691f14f2031f0aca1e1c207f1c15c0815471358b chai-plugin-helper poses as a chai plugin and ships a verbatim copy of chai's public API index.js, lib/chai.js, expect/should/assert exports, version string '4.3.8', description copied from chai so it...

Malicious code in chai-plugin-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf8b1cc2e3c780dc0ac44e7691f14f2031f0aca1e1c207f1c15c0815471358b chai-plugin-helper poses as a chai plugin and ships a verbatim copy of chai's public API index.js, lib/chai.js, expect/should/assert exports, version...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

MAL-2025-4388 Malicious code in plugin-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6894a10f2cae1576d4b28556e817ceae00aa303e12f88eeca933fcc6c0c8f891 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in plugin-helper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in plugin-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6894a10f2cae1576d4b28556e817ceae00aa303e12f88eeca933fcc6c0c8f891 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2021-21606 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2020-2103 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2019-10354 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2019-10353 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2018-1999042 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2017-1000391 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2017-2608 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...

com.lookout.jenkins:environment-script (>=1.2, <=1.2.3), org.jenkins-ci.main:jenkins-test-harness (1.565) +26 more potentially affected by CVE-2019-1003003 via org.jenkins-ci.main:jenkins-core (1.565)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.lookout.jenkins:environment-script =1.2, =1.0, =0.1, =2.0, =1.23, =1.0.0, =1.0-beta-1, =1.3...