chai-as-patched@7.0.6
Malicious code in chai-as-patched (npm)
T1059 · Command and Scripting Interpreter
Analysis
chai-as-patched@7.0.6 is a combosquat dropper. index.js spawns a detached child process running lib/initializeCaller.js, which decodes a base64 URL (hxxps://tomato-brunhilda-40[.]tiiny[.]site/index.json), fetches remote code via axios, and executes it via new Function.constructor("require", response) — arbitrary remote code execution that auto-runs on require().
- analyzed by
- Leitwacht
- first seen
- Jun 1, 2026, 02:06 PM
- analyzed
- Jun 1, 2026, 02:08 PM
Related advisories
- @redhat-cloud-services/hcc-kessel-mcp@0.3.1
- vitest-preview-pro@10.0.7
- sw-pluginer@1.1.0
- ai-pro-sdk@2.0.3
- theta-sdk-js@1.2.14
- chai-sdk@1.4.7
- luludawang-kit@0.0.1
- @marketfront/bannerpopup@7.0.0
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. Published CC0. Think this is a mistake? See the dispute policy.