MalwarePublished 9 Jul 2026

chai-as-disarmed (npm) · Malicious Code

Affects chai-as-disarmedSource GCVE Database

Malicious package : remove chai-as-disarmed and rotate any secrets on hosts that installed it.

Data as of 10 Jul 2026, 10:21 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10042

What to do

Remove chai-as-disarmed from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmchai-as-disarmed	Affected =3.2.3	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package 'chai-as-disarmed' version 3.2.3 is a malicious typosquat of 'chai-as-promised' that impersonates 'pino' in its README and keywords to trick users into installing it. Upon requiring the package, it spawns a detached process that fetches a remote payload from a mutable third-party JSON storage service and executes it with full Node.js require access, enabling arbitrary code execution. This behavior is unrelated to the advertised functionality and allows the attacker to change the payload at any time without republishing the package.

Impact

This malicious package enables remote attackers to execute arbitrary code on the systems of users who install and require it, with full access to Node.js modules via 'require'. This can lead to complete compromise of the affected environment, including data theft, system manipulation, or further malware deployment. The dynamic nature of the payload fetched from a mutable third-party JSON store increases the risk and persistence of the threat.

Defensive guidance

Users should immediately remove 'chai-as-disarmed' version 3.2.3 from their projects and dependency trees. Avoid installing packages with suspicious names that closely resemble popular legitimate packages (typosquatting). Verify package authenticity and source before installation. Consider using package integrity verification tools and lockfiles to prevent accidental installation of malicious packages.

Summary

The 'chai-as-disarmed' npm package (version 3.2.3) is a malicious typosquatting package designed to impersonate legitimate packages to bait installations. When required, it detaches a process that fetches a base64-encoded URL from a third-party JSON storage service, performing an authenticated GET request with headers hidden via base64 encoding. The fetched '.cookie' string is executed dynamically using 'new Function.constructor', granting the remote operator arbitrary code execution within the installer's Node.js environment with full access to 'require'. The remote payload can be updated at any time without republishing the package, making this a persistent and flexible attack vector.

References

npmjs.com/package/chai-as-disarmed/v/3.2.3 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 10:21 UTC

Technical details

References

Community reviews