chai-as-staged
This document describes the management of vulnerabilities for the project and all modules within the organization.
This report shows the evidence for chai-as-staged@6.0.4, the only known version.
This package appears in our research on the fake chai plugin campaign, with how it works, the full package list and what to do if you installed it.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiSource inspection confirms a user-invoked staged payload loader with network retrieval and dynamic execution, which is concrete malicious behavior. The absence of install hooks lowers trigger breadth but does not make the runtime RCE benign.
Decision evidence
public snapshot- package.json main is index.js with no lifecycle hooks but runtime entrypoint is active.
- index.js spawns detached node process for lib/initializeCaller.js when exported middleware is called.
- lib/initializeCaller.js decodes a Base64 HTTPS URL and calls it with axios.
- lib/initializeCaller.js reads response.data.cookie and executes it via new Function.constructor("require", response).
- Package contents appear copied from pino docs/code while published as chai-as-staged.
- No install-time lifecycle script in package.json.
- No direct local credential/file harvesting found in inspected source.
- Attack requires the exported middleware/function to be invoked, not mere require.
Source & flagged code
2 flagged · loading sourceSource decodes a Base64-obscured HTTP endpoint at runtime.
lib/initializeCaller.jsView on unpkg · L2Findings
Affected versions and remediation
This report applies to chai-as-staged@6.0.4.
The versions list below shows the verdict for each recorded version.
- Avoid installing chai-as-staged@6.0.4. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.