chai-as-deployed

MAL-2025-192318

npmmalware12/5/2025
Description

Malicious code in chai-as-deployed (npm)

Indicators of Compromise
SHA256 Hashes (4)
117c632d121fc31a4f589c4d76730535c6d5b576ae6e3addab756be448c13bd3
7ebc44576073489ddc650d352e43bee3aa036bcdc2914887eb9c36be2780e09b
82ce1e1a4cb0696479950b0f97b7632eb576a2ed59176b0623e8abb93356adfb
e76f6aab6702d24f2006ef873c7367843deac7aaa029cb33341ab0bcba98984e
References (4)
https://github.com/advisories/GHSA-3c8c-2jpp-67vqOSVhttps://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSVhttps://security.snyk.io/vuln/SNYK-JS-CHAIASDEPLOYED-14152235OSVhttps://thehackernews.com/2025/11/north-korean-hackers-deploy-197-npm.htmlOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/5/2025
Aliases
GHSA-3c8c-2jpp-67vqSNYK-JS-CHAIASDEPLOYED-14152235
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001