chai-as-sharpened@7.0.9

Analysis

chai-as-sharpened is a combosquat of the chai assertion library. When the exported middleware function is called, it spawns a detached Node.js child process that fetches remote JavaScript code from hxxps://tomato-brunhilda-40[.]tiiny[.]site/index[.]json and executes it via the Function constructor with full access to Node's require() scope. The fetched payload can run arbitrary code on the victim's machine. The C2 host is tomato-brunhilda-40[.]tiiny[.]site, path /index.json, fetched over HTTPS with an x-secret-key header.