The npm package chai-foundry version 7.0.2 and 7.0.3 is identified as a trojanized malicious package masquerading as a chai plugin. It impersonates legitimate software by copying metadata from the pino logger and includes a heavily obfuscated multi-megabyte payload that executes immediately upon requiring the package. This payload hides its network endpoints and behavior, indicating it is a hostile dropper and stealer. Systems with this package installed should be considered fully compromised, and secrets and keys must be rotated from a separate, clean system.