chai-assertions-plus

MAL-2026-12349

npmmalware8/5/2026

Description

Malicious code in chai-assertions-plus (npm)

Indicators of Compromise

SHA256 Hashes (2)

76b8da3d8783a9e8a196f985c5cdda0bf36a704f0eb4a00a849688e7fb7475f7

80a83cd9353779d12538e8c6b06276178f6f0c246abd7d5148ce805536cbf57f

References (2)

https://www.npmjs.com/package/chai-assertions-plus/v/6.0.6OSV https://www.npmjs.com/package/chai-assertions-plus/v/6.0.5OSV

Details

Ecosystemnpm

Attack Typemalware

Published8/5/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001