Open-source atomic malware analysis

Analyze another

chai 3.5.0

UNKNOWN
Verdict: BENIGN
SHA256: aca8137bed5bb295bd7173325b7ad604cd2aeb341d739232b4f9f0b26745be90
“BDD/TDD assertion library for node.js and the browser. Test framework agnostic.”
Mal-ecule
H₄(Cm₂Db₇OsU)Md(Pa₃)
Size 86.2 KB download
First seen 28 days ago
Analyzed 1 day ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url References a public code-forge URL
notable severity, 94% confident.
communications/url/construction URL embeds an angle-bracket placeholder
notable severity, 92% confident.
data/control-flow CommonJS module re-exports required package
notable severity, 90% confident.
data/format Markdown references a remote image
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 90% confident.
data/source/property Reads constructor properties repeatedly
notable severity, 90% confident.
data/string Dense concatenated string fragments
notable severity, 90% confident.
os/module CommonJS require inside try fallback
notable severity, 80% confident.
ui/window/manage Writes HTML into the DOM with innerHTML
baseline severity, 80% confident.
data/source/syntax Copies one indexed array element to another
component severity, 95% confident.
communications/url Encoded URL references MDN documentation

Metadata

notable severity, 90% confident.
package/manifest package.json repository under github.com/chaijs
notable severity, 96% confident.
package/testing/harness Calls a test-case function
notable severity, 90% confident.
package/testing/presence Package uses Karma test runner
baseline severity, 80% confident.
file/profile English function-word token "and"
baseline severity, 96% confident.
library Browserify bundled JavaScript module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 95% confident.
package/files Manifest sits at npm publish root
baseline severity, 100% confident.
package/quality package.json defines a package name
baseline severity, 95% confident.
package/testing Mocha test framework markers

20 of 22 traits shown

Identity

SHA-256 aca8137bed5bb295bd7173325b7ad604cd2aeb341d739232b4f9f0b26745be90
Canonical SHA-256 059e5a32b90f7f4087b44d9885cb0fb2a2c1f80408c55b4fed662c4d15782ac2
Filename [email protected]
Package chai
Version 3.5.0
PURL pkg:npm/[email protected]

Origin

Source x
Feed github-advisories
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/chai/-/chai-3.5.0.tgz

Timeline

First seen 1 Aug 2026 23:28 UTC
First analyzed 1 Aug 2026 23:30 UTC
Last analyzed 28 Aug 2026 22:09 UTC
Last updated 28 Aug 2026 22:09 UTC

Labeling

Label unknown
Traits version b59b7