npm
Malicious chai-promised-plugin @2.3.5
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 3:33 PM UTC
OSV ID
MAL-2026-1682
Ecosystem
npm
Summary
The package chai-promised-plugin was found to contain malicious code.
Source: amazon-inspector (adcef9446d381cf0eb689e6ca0e6cdec06bae764c2c8c2cfaf83ba73597713b9)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.