VYPR

npm · Malicious package advisory

Malware

chai-await-chain

MAL-2026-1673

Malicious code in chai-await-chain (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (ee42e0ab59b1093e2cb5da46d6e015073bbae0cba06eb9a0720df44e54c9c111)
The package chai-await-chain was found to contain malicious code.

Compromised versions (2)

  • 2.4.2
  • 2.4.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.