chai-async-chain

MAL-2025-190627

npmmalware11/24/2025
Description

Malicious code in chai-async-chain (npm)

Indicators of Compromise
SHA256 Hashes (3)
fdec53906ddd8f960924b6b45b6c8a742115debcec85495bd0f052d7d13105ec
e99ef9605c8341ad648b4f6fb3d4102c0288cf3742d3e1abe55c1d45d9fcdbec
0d5220f0e61ec87bba00a411e021d994b4cd8e91ff78c250ee3fd28d87b4dfc5
References (4)
https://github.com/advisories/GHSA-9c7f-644c-p3xwOSVhttps://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSVhttps://npmjs.com/package/chai-async-chainOSVhttps://security.snyk.io/vuln/SNYK-JS-CHAIASYNCCHAIN-14102888OSV
Details
Ecosystemnpm
Attack Typemalware
Published11/24/2025
Aliases
GHSA-9c7f-644c-p3xwSNYK-JS-CHAIASYNCCHAIN-14102888
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001