VYPR
← All malware advisories

npm · Malicious package advisory

Malware

chai-pack

MAL-2025-192725

Malicious code in chai-pack (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (a153ef79c99f8b960c8e0557a16cb187571a31c3d4c2479e177ab630b36b6af6)
The package chai-pack was found to contain malicious code.

Compromised versions (3)

  • 5.1.0
  • 1.1.7
  • 1.1.9

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.