Which versions of chai-as-testmode are malicious?

The following npm versions of chai-as-testmode are flagged malicious: 1.4.7. Treat any of these as compromised.

How do I remediate chai-as-testmode if I installed it?

chai-as-testmode is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.

I already installed chai-as-testmode — how do I know if it already compromised me?

If chai-as-testmode was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is chai-as-testmode part of a known attack campaign?

Yes — chai-as-testmode is associated with the IN-MAL-2026-020896 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find chai-as-testmode across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for chai-as-testmode (version 1.4.7).

Malicious package

chai-as-testmodenpm

Advisory published Oct 4, 2026Updated Oct 4, 2026

chai-as-testmode is a confirmed malicious npm package (MAL-2026-17473) that steals credentials and exfiltrates sensitive data (malicious version 1.4.7). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in chai-as-testmode (npm)

MAL-2026-17473

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

npm uninstall chai-as-testmode

What this malware does

The package masquerades as the pino logging library (README badges and lib/ contents mimic pino) but ships a dropper at lib/initializeCaller.js. A self-executing IIFE POSTs the full process.env object to a base64-concealed endpoint that decodes to https://ipcheck-hashed.vercel.app/api/auth/b4dadd6a26d820d08596, using an 'x-secret-header: secret' header, and then passes the HTTP response body to new Function('require', response.data) with require handed in — executing attacker-returned JavaScript in the installer's Node process. The transmitted payload is the entire environment (not a single named variable), which on developer and CI machines typically includes NPM_TOKEN, GITHUB_TOKEN, AWS_* credentials, and other CI secrets. The destination URL is stored base64-encoded to conceal it from casual inspection, and the typosquat-style package name together with pino-themed documentation form a cover story for the dropper.

Malicious versions

1 flagged

1.4.7

Indicators of compromise (SHA-256)

af5e91a44a2eb0773df19fce2096660c285bafbe846a5f09d8bb25ff0eba22b2

Detection & response playbook

Credential / info stealer

Find it
Search your lockfiles and build artifacts for chai-as-testmode (version 1.4.7).
If you installed it — respond
chai-as-testmode is built to steal secrets, so assume every credential the build or runtime could read is compromised. Remove it from your project and lockfile, then rotate ALL exposed secrets — npm/registry tokens, cloud keys, CI/CD secrets, SSH keys, and any .env values — from a known-clean machine. Audit logs for unauthorized use of those credentials.
Did it already run?
If chai-as-testmode was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. chai-as-testmode on npm has been identified as a malicious package (version 1.4.7 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-020896

References

npmjs.com

Credits

Amazon Inspector · finder

Detect & block this

O3 blocks chai-as-testmode-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the credential exfiltration and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database