chai-as-chain

MAL-2026-2160

npmmalware3/25/2026
Description

Malicious code in chai-as-chain (npm)

Indicators of Compromise
SHA256 Hashes (3)
1d06397b7e66c2a8ecf1542a1f7d18b0f5a87d08a276dc88f77b1f8b2d818d47
9bcf6b93b6186112457361f81d21c00830bf0c48c75763de88d97f1b075944cf
7057f98f013585abae7e353a4ad66ed7087af5d486e8f2bd6a488785bd763554
References (1)
https://github.com/advisories/GHSA-8cpf-9rj8-q68mOSV
Details
Ecosystemnpm
Attack Typemalware
Published3/25/2026
Affected Versions
0
Aliases
GHSA-8cpf-9rj8-q68m
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001