0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
chai-foundry
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting chai-foundry, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13356 | Unknown | Malicious code in chai-foundry (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (94e40493af5310c6ee769911bff65e55538911ae3f286fba2a3474f9f8a38940) chai-foundry@7.0.2 is a trojan package presenting itself as a chai plugin (README shows `chai.use(chaiLeaf)`) while its badges, documentation, and internal version metadata (`lib/meta.js` exports version `9.6.0`) are copied from the pino logger. The package's main entry `index.js` immediately loads `./lib/config`, a 3.5MB file that is heavily obfuscated with obfuscator.io-class transforms: a rotated string array of 20,855 entries, two runti |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (94e40493af5310c6ee769911bff65e55538911ae3f286fba2a3474f9f8a38940) chai-foundry@7.0.2 is a trojan package presenting itself as a chai plugin (README shows `chai.use(chaiLeaf)`) while its badges, documentation, and internal version metadata (`lib/meta.js` exports version `9.6.0`) are copied from the pino logger. The package's main entry `index.js` immediately loads `./lib/config`, a 3.5MB file that is heavily obfuscated with obfuscator.io-class transforms: a rotated string array of 20,855 entries, two runti