npm
Malicious chai-sub @1.1.7
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 11:32 AM UTC
OSV ID
MAL-2026-588
Ecosystem
npm
Summary
The package chai-sub was found to contain malicious code.
Source: amazon-inspector (9a9fb8daf2c61a42d820b2e0f8a846b9f2c95ed6a1cdc4c19a7d80f3398b4a21)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.