chai-test-async

MAL-2025-190494

npmmalware11/14/2025
Description

Malicious code in chai-test-async (npm)

Indicators of Compromise
SHA256 Hashes (3)
5b8f7387cfa3c737fbb688f651f56f2174c2e831df5ded826ec25d8b7dab1bc4
7f220c85ce9af5bc025f22e269aaaf3af1c5853df736bcbb97331229c06b1c32
ff383a6fd09b8c6c601c4b286925d1a53be1f304c0989d811f81a9f168370491
References (3)
https://github.com/advisories/GHSA-pm4f-x94x-7v26OSVhttps://security.snyk.io/vuln/SNYK-JS-CHAITESTASYNC-13961688OSVhttps://npmjs.com/package/chai-test-asyncOSV
Details
Ecosystemnpm
Attack Typemalware
Published11/14/2025
Aliases
GHSA-pm4f-x94x-7v26SNYK-JS-CHAITESTASYNC-13961688
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001