chai-use-chains (npm) · Malicious Code
Affects chai-use-chainsSource GCVE Database
Rated by Threat Radar
Data as of 8 Sep 2026, 09:23 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmchai-use-chains | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should immediately remove or avoid using chai-use-chains versions 1.2.6 and 1.2.7. Consider replacing the package with a trusted alternative and audit dependencies for similar malicious packages. Monitor for updates from the package maintainers or security advisories for remediation.
Description
The npm package chai-use-chains versions 1.2.6 and 1.2.7 contain malicious code that downloads and executes a command-and-control (C2) dropper from a remote URL. This behavior is similar to previously observed malware in related packages. There is no official patch or remediation guidance provided. No known exploits in the wild have been reported.