MalwarePublished 28 Jul 2026Updated 4 Aug 2026

chain-analyze (npm) · Malicious Code

Affects chain-analyzeSource GCVE Database

Malicious package : remove chain-analyze and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 16:12 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-11133

What to do

Remove chain-analyze from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npmchain-analyze	Affected 1.0.1 – 1.0.5 5 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (eb22a3b9c64598bc202456844105c3e3e7f7e7185abe335b2694d85deb1b6c9d) The published tarball's dist bundles (dist/sigchain-js.cjs.js, dist/sigchain-js.esm.js, dist/sigchain-js.umd.js) execute at module load: they read an encrypted blob from the sibling dependency 'chain-manager' (either imported as `desKey` or read from a file under node_modules/chain-manager via fs.readFileSync), DES-decrypt it with a hardcoded PASSWORD, then invoke child_process.spawn('node', [], { detached: true,... }) and pipe the decrypted script into the child's stdin — running attacker-controlled Node.js code on the installer's machine on any require()/import of the package. The dropper code is present only in dist/; the src/ tree contains no reference to 'chain-manager' or to spawn('node'), and package.json's declared main 'dist/chain-analyze.cjs.js' is not shipped — only the tampered dist/sigchain-js.* bundles are, so consumers resolve to the malicious build while source reviewers see a clean Theta blockchain SDK. package.json declares author 'Theta Labs' and describes itself as a JavaScript library for the Theta blockchain, impersonating the official @thetalabs/theta-js SDK, and pins 'chain-manager' ^1.0.9 which supplies the encrypted payload — a split-package design that hides the executable code from scanners inspecting only this tarball. ## Source: ghsa-malware (c36bbf5095bf780a61e33774d81ded0ffe9f5cfd2288bae3433a657fe7213c7b) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

Impact

Systems that install or run 'chain-analyze' version 1.0.2 are fully compromised, as attacker-controlled code executes with the privileges of the importing process. This can lead to complete system takeover, exposure of secrets and keys, and persistent unauthorized access. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated from a different, trusted machine.

Defensive guidance

Immediate removal of the 'chain-analyze' package version 1.0.2 is strongly recommended. However, because the attacker may have established persistent control, removing the package alone may not fully remediate the compromise. All secrets and keys on the affected system should be rotated from a secure, uncompromised environment. Monitor for any suspicious activity and consider rebuilding the affected system if possible.

Summary

The 'chain-analyze' npm package version 1.0.2 is a malicious package that executes attacker-controlled code upon import. Its distributed bundles (dist/sigchain-js.*) decrypt an encrypted payload from the 'chain-manager' dependency using a hardcoded password and spawn a detached Node.js process to run this payload. The source code and main entry point appear clean to evade detection, while the malicious code is hidden in the distributed bundles. This split-package design conceals the malicious payload from scanners inspecting only the 'chain-analyze' tarball. The package impersonates the official Theta Labs SDK, misleading users and reviewers. Any system with this package installed should be considered fully compromised.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 30 Jul 2026, 05:47 UTC

Technical details

References

Community reviews