The npm package 'chai-as-inspired' is a typosquatting malicious package that executes attacker-controlled JavaScript code with full Node.js privileges. It achieves this by spawning a detached child process that fetches remote code from a mutable JSON storage endpoint, then executes it in a retry loop. The remote code can be changed at any time by the attacker, enabling ongoing malicious activity. This package version 2.2.4 is affected.