npm
Malicious chai-chain-async @2.4.3
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 12:32 PM UTC
OSV ID
MAL-2026-386
Ecosystem
npm
Summary
The package chai-chain-async was found to contain malicious code.
Source: amazon-inspector (d3340d37485bf0cbe47f2378b96588e8afadc83635bef93d108730ea72ab8f78)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.