registry / Remote code execution / chai-as-doc
chai-as-doc
This document describes the management of vulnerabilities for the project and all modules within the organization.
This report shows the evidence for chai-as-doc@2.3.5, the only known version.
This package appears in our research on the fake chai plugin campaign, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package contains an explicit detached remote-code loader activated by normal middleware use. Absence of an install hook does not mitigate runtime arbitrary code execution.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
Runtime invocation of the exported middleware, such as registering it with Chai.
Impact
Remote operator can execute arbitrary code with the consuming application's user privileges.
Mechanism
Detached remote payload fetch and dynamic execution.
Attack narrative
At runtime, `index.js` starts `lib/initializeCaller.js` as a detached background Node process. That helper decodes an obscured Vercel URL, POSTs data to it, then passes the server response to `new Function` and executes it with `require` access. This is a concrete remotely controlled code-execution chain, not a benign logging or Chai plugin implementation.
AI rationale
The package contains an explicit detached remote-code loader activated by normal middleware use. Absence of an install hook does not mitigate runtime arbitrary code execution.
Evidence
package.jsonindex.jslib/initializeCaller.jsREADME.md
Network endpoints1
ipcheckr-hashed.vercel.app/api/auth/6c1d60d35852ef0c05df
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- `index.js` spawns detached `lib/initializeCaller.js` when middleware is invoked.
- `lib/initializeCaller.js` POSTs to a Base64-obscured external endpoint.
- The response body is executed with `new Function("require", response.data)`.
- The child process is detached and unrefed, hiding it from the caller lifecycle.
- Package contents and README imitate unrelated Pino/Chai functionality.
Evidence against
- `package.json` has no preinstall, install, or postinstall lifecycle hook.
- The child shadows `process.env`, so the POST body is embedded values rather than host environment variables.
Behavioral surface
ChildProcessEnvironmentVarsEvalNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourceindex.jsView file
3const path = require('path');
L4: const { spawn } = require('child_process');
L5: const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');
High
3Cross-file remote execution chain: index.js spawns lib/initializeCaller.js; helper contains network access plus dynamic code execution.
L3: const path = require('path');
L4: const { spawn } = require('child_process');
L5: const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');
...
L37: function runBackgroundTask(args) {
L38: const scriptPath = path.resolve(__dirname, './lib/initializeCaller.js');
L39:
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
index.jsView on unpkg · L3•matchType = malicious_source_fingerprint_signature
signature = 3522c2fe164c56ca
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = cookie-sign@2.3.5
matchedPath = index.js
matchedIdentity = npm:Y29va2llLXNpZ24:2.3.5
similarity = 1.000
shingleOverlap = 12
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Findings
6 High3 Medium3 Low
HighChild Processindex.js
HighEvallib/initializeCaller.js
HighSame File Env Network Executionlib/initializeCaller.js
HighCross File Remote Execution Contextindex.js
HighBase64 Obscured Urllib/initializeCaller.js
HighKnown Malware Source Fingerprint Signatureindex.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterndocs/transports.md
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to chai-as-doc@2.3.5.
The versions list below shows the verdict for each recorded version.
- Avoid installing chai-as-doc@2.3.5. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.