npm
Malicious chai-async-promised @3.3.5
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 4:33 PM UTC
OSV ID
MAL-2026-719
Ecosystem
npm
Summary
The package chai-async-promised was found to contain malicious code.
Source: amazon-inspector (3b03e745920fbf2f3b25c5f9bcd2cd6814de348ff5ae3a0c5d8832f2494b2770)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.