MAL-2026-2741

    Dashboard / Malicious Package / MAL-2026-2741

    MAL-2026-2741

    Published: 16 Apr 2026Last Modified: 23 Apr 2026

    Summary: Malicious code in chai-chain-coremesh (npm)

    Details: Source: amazon-inspector (0998d78c57b51efc4ff5789a97e24374a9f1a3ea3d50422802d4f0b189473877) The package chai-chain-coremesh was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: chai-chain-coremesh

    Purl: pkg:npm/chai-chain-coremesh

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.4.5
    MAL-2026-2741 | CVE-DB