registry / Malware / chai-as-promised-plus

chai-as-promised-plus

Extends Chai with comprehensive promise assertions and testing utilities.

This report shows the evidence for chai-as-promised-plus@6.1.3, the only known version.

This package appears in our research on the fake chai plugin campaign, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The package's real export path introduces obfuscated system reconnaissance and remote-capable execution primitives that are not required for Chai assertions. This is malicious import-time behavior, not a noisy static label.

Static reason

No blocking static signals were detected.

Trigger

Runtime import of `chai-as-promised-plus`.

Impact

Host data can be collected and commands or additional behavior can be executed outside the package's stated assertion-plugin purpose.

Mechanism

Obfuscated import-time host reconnaissance and remote-capable payload loader.

Attack narrative

The main entrypoint redirects module export to an obfuscated 3.5 MB configuration file. On import, that file loads OS, filesystem, path, shell-execution, HTTP, and cryptographic capabilities, constructs host/OS/username telemetry, and contains dynamic `Function` execution. These behaviors are unrelated to promise assertions and establish a concrete malicious runtime payload surface, even though no npm lifecycle hook is present.

AI rationale

Evidence

package.jsonlib/chai-as-promised-plus.jslib/config/config.js

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Malware with low false-positive risk.

Evidence for block

`lib/chai-as-promised-plus.js` replaces its export with `./config/config`.
`lib/config/config.js` is a 3.5 MB obfuscated import-time module.
`lib/config/config.js` imports `os`, `fs`, `path`, and `child_process` (`execSync`, `spawn`).
The module collects host, OS, and username data in `Utils.gsi`.
The module dynamically loads `axios` and `crypto`.
Obfuscated code invokes the `Function` constructor.

Evidence against

`package.json` has no `preinstall`, `install`, or `postinstall` lifecycle hook.
The visible assertion implementation itself is conventional Chai promise support.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

MinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 271 KB of source, external domains: promisesaplus.com

Oversized source lightweight scan

lib/config/config.js3.38 MB file, sampled 256 KB

Source & flagged code

1 flagged

lib/config/config.jsView file

•path = lib/config/config.js kind = oversized_source_file sizeBytes = 3546568 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/config/config.jsView on unpkg

Source & flagged code

1 flagged · loading source

lib/config/config.jsView file

•path = lib/config/config.js kind = oversized_source_file sizeBytes = 3546568 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/config/config.jsView on unpkg

Findings

1 High1 Medium2 Low

HighOversized Source Filelib/config/config.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowUrl Strings

Affected versions and remediation

This report applies to chai-as-promised-plus@6.1.3.

The versions list below shows the verdict for each recorded version.

Avoid installing chai-as-promised-plus@6.1.3. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-08-10 13:04:59.853Z (UTC).

Source advisory published: 2026-08-10 12:31:42.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

1 known version

6.1.3latestshownMaliciousMalwareBlockPublishedJul 17, 2026, 4:30 AM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Runtime surface

Behavioral surface

Source & flagged code

Related packages

Other malware packages