npm
Malicious chai-chai-chain-promised @2.4.3
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 3:29 AM UTC
OSV ID
MAL-2026-1676
Ecosystem
npm
Summary
The package chai-chai-chain-promised was found to contain malicious code.
Source: amazon-inspector (05be57049f1ed27fc157d4893925be0d06323a7b47e8b8893ff0c353e5ddb82d)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.