MAL-2026-1672

    Dashboard / Malicious Package / MAL-2026-1672

    MAL-2026-1672

    Published: 18 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in chai-as-sync (npm)

    Details: Source: amazon-inspector (201c3097a1417370d6190e60489ac7894d63b574004eaa2b069958131ea2eda0) The package chai-as-sync was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: chai-as-sync

    Purl: pkg:npm/chai-as-sync

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.1.7
    MAL-2026-1672 | CVE-DB