Which versions of chai-assert-kit are malicious?

The following npm versions of chai-assert-kit are flagged malicious: 3.8.1. Treat any of these as compromised.

How do I remediate chai-assert-kit if I installed it?

Remove chai-assert-kit from your project and lockfile, then assume any secrets accessible to the build or runtime were exposed: rotate API keys, tokens, and credentials, and audit for unexpected outbound network activity or persistence. Use O3 Security's dependency scanner to confirm the package and its artifacts are fully purged across your stack.

Is chai-assert-kit part of a known attack campaign?

Yes — chai-assert-kit is associated with the IN-MAL-2026-007073 campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

Can O3 Security detect chai-assert-kit in my codebase?

Yes. O3 Security's supply-chain scanner checks every dependency against known-malicious package intelligence at install time and in CI, blocking chai-assert-kit and packages like it before any post-install script runs.

Malicious package

chai-assert-kitnpm

Malicious code in chai-assert-kit (npm) Remove it immediately and rotate any exposed credentials.

MAL-2026-6221

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

npm uninstall chai-assert-kit

What this malware does

Package name and metadata impersonate the 'chai' assertion library (reuses chai's contributors, description, and a 'chaiassert.com' homepage), but the package contains no assertion logic. On require()/import, index.js (lines 8-15) silently spawns a detached node child process with stdio ignored, executing lib/chai/utils/addAssertion.js. That file is a heavily obfuscated obfuscator.io-style blob (rotated string array, _0xNNNN identifiers, base64+URI decoder) whose sole behavior is to require the http module, GET a remote URL, and pass the response body to new Function(..., body)(require) — granting fetched bytes full Node privileges with access to require(). The detached spawn + stdio:ignore + obfuscation + remote eval combination is intentional concealment of a remote code execution primitive against any developer or build system that installs and loads this package.

Malicious versions

1 flagged

3.8.1

Indicators of compromise (SHA-256)

fb347379535c0ea9895e1dc8dd2f20b1fd092b8e62b433bfbd49b2ac1bff2f72

Frequently asked questions

No. chai-assert-kit on npm has been identified as a malicious package (version 3.8.1 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

IN-MAL-2026-007073

References

npmjs.com

Credits

Amazon Inspector · finder

Scan your dependencies

O3 Security blocks malicious packages like this at install time and in CI.

Supply-chain protection