npm

chai-max @2.4.3

Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 2:32 PM UTC

Malicious

OSV ID

MAL-2025-192754

Ecosystem

npm

Summary

The package chai-max was found to contain malicious code.

Source: amazon-inspector (1bf9b30832b678dc77fdae0e722638e2a3ff7ba5cf07b09960233418192dd073)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.