chai-promised-chain

MAL-2025-192319

npmmalware12/5/2025
Description

Malicious code in chai-promised-chain (npm)

Indicators of Compromise
SHA256 Hashes (4)
6e78b63f74d39f6166cad9676b60eaf4d3d811c05684aacb93ed20c87776b4b1
8a501d6eba591eb49cf120c8aee8c4e0600aacf2263984d3ae14e0d1b53daa92
79d328416c8dba61bc0033b47136a3059b7f044d94a764a028c8acc9c5700ef0
585a338ae9c39206a24a3893de05976b833d70462a9a809fe5690111b88ab29a
References (3)
https://github.com/advisories/GHSA-26mv-pxh2-2mc8OSVhttps://npmjs.com/package/chai-promised-chainOSVhttps://security.snyk.io/vuln/SNYK-JS-CHAIPROMISEDCHAIN-14188260OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/5/2025
Aliases
GHSA-26mv-pxh2-2mc8SNYK-JS-CHAIPROMISEDCHAIN-14188260
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001