MAL-2026-10042

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/chai-as-disarmed/MAL-2026-10042.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10042
Published
2026-07-09T15:31:23Z
Modified
2026-07-09T16:31:53.092904889Z
Summary
Malicious code in chai-as-disarmed (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (b6d396201a3dd1706d97f7daa880f254c920bbea65ea6b013ed48f78a21a0241)

Package name typosquats chai-as-promised while the README and keywords impersonate pino to bait installs. On require(), index.js detach-spawns lib/caller.js, which decodes a base64-stored URL to https://api.jsonstorage.net/v1/json/2ef8c758-.../a179ea35-..., issues an authenticated GET (header name and value are also base64-hidden inside a local object that shadows process.env), and executes the returned .cookie string via new Function.constructor('require', s)(require) — granting the remote operator arbitrary code execution in the installer's Node.js process with full require access. The fetch retries up to 5 times. The remote content sits in a mutable third-party JSON store, so the executed payload can be swapped at any time without republishing the package. None of this behavior corresponds to the advertised chai/pino functionality.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-009121",
            "sha256": "b6d396201a3dd1706d97f7daa880f254c920bbea65ea6b013ed48f78a21a0241",
            "import_time": "2026-07-09T16:20:42.678266948Z",
            "modified_time": "2026-07-09T15:31:23Z",
            "versions": [
                "3.2.3"
            ],
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / chai-as-disarmed

Package

Name
chai-as-disarmed
View open source insights on deps.dev
Purl
pkg:npm/chai-as-disarmed

Affected ranges

Affected versions

3.*
3.2.3

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/chai-as-disarmed/MAL-2026-10042.json"
cwes 
[
    {
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
indicators 
{
    "evidence_files": [
        {
            "sha256": "4e8193c9bbf3102012bb1e9575e8296fac350d5af1441c97570f3b988c8daaf2",
            "tlsh": "3b01cb61ceb88e6301dd21828c2e4643b6618c539928fd2932d7522c0f9e9bf11bf21d",
            "path": "package.json"
        },
        {
            "sha256": "6c87c9848b319c905ed8db467c1b8535c83c4afed4391d6df3b2c0c0f3de76e2",
            "tlsh": "b501c29934fe501c015111e9171fb1326050e4773986d6c8374c87029fa667e6e93adf",
            "path": "lib/caller.js"
        }
    ],
    "package_integrity": [
        {
            "filename": "chai-as-disarmed-3.2.3.tgz",
            "hashes": {
                "sha1": "f4060088659f36923da72cc961b9b6a010efbddb",
                "sha512_sri": "sha512-aKndTvFWthsrdVdfZyGowK/BJ7U8Ku9nsfk1T+6tGJWyESLQ/H6IKOAahfkW8OEjB1Fs7lnBprvzBM29b2jOFQ=="
            }
        }
    ]
}