chain-test-async

MAL-2025-190495

npmmalware11/14/2025
Description

Malicious code in chain-test-async (npm)

Indicators of Compromise
SHA256 Hashes (3)
c1d03d8b6de88ac68ebdd7ea00a039ed4f3d071cda41ca8e038c5cad8eb21259
b3e0c036eeb1631fbe88e6fc1c18dc89f31a900e1d528bd2027a2aef1eb35a60
6a687083bdb638bc4c0ce2696793c136dd6f94a00cffd96d53563205efd93116
References (3)
https://github.com/advisories/GHSA-m3ww-fr92-p4xxOSVhttps://npmjs.com/package/chain-test-asyncOSVhttps://security.snyk.io/vuln/SNYK-JS-CHAINTESTASYNC-13961687OSV
Details
Ecosystemnpm
Attack Typemalware
Published11/14/2025
Aliases
GHSA-m3ww-fr92-p4xxSNYK-JS-CHAINTESTASYNC-13961687
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001