Open-source atomic malware analysis

Analyze another

chai 4.1.2

UNKNOWN
Verdict: BENIGN
SHA256: dd20186f63cf19bb6fb07de5fb3ee29ff4995ce716e9b76e4aee8d8b6dd9fd61
“BDD/TDD assertion library for node.js and the browser. Test framework agnostic.”
Mal-ecule
H₄(Cm₃Db₆Os₂U)Md(Pa₃)
Size 134.6 KB download
First seen 27 days ago
Analyzed 8 days ago
Package pkg:npm/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 10 samples

Micro-behaviors

notable severity, 90% confident.
communications/http/url Cleartext http:// URL
notable severity, 94% confident.
communications/url/construction URL query embeds an <> placeholder
notable severity, 94% confident.
data/format Remote URL contains an angle value
notable severity, 85% confident.
data/serialize Serializes an identifier as JSON
notable severity, 92% confident.
os/env/vars CI provider environment reference (TRAVIS)
notable severity, 90% confident.
os/module CommonJS require inside try fallback
notable severity, 80% confident.
ui/window/manage Writes HTML into the DOM with innerHTML
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable
component severity, 95% confident.
communications/url Encoded URL references MDN documentation

Metadata

notable severity, 90% confident.
package/manifest Repository identifies major Git host
baseline severity, 80% confident.
file/profile Contains common English function words
baseline severity, 96% confident.
library Browserify bundled JavaScript module
baseline severity, 100% confident.
package package.json defines a package version
baseline severity, 100% confident.
package/quality package.json defines a package name
baseline severity, 95% confident.
package/testing Mocha test framework markers
component severity, 90% confident.
file File has 30 or more lines

20 of 21 traits shown

Identity

SHA-256 dd20186f63cf19bb6fb07de5fb3ee29ff4995ce716e9b76e4aee8d8b6dd9fd61
Canonical SHA-256 0bd795cecd1dc57f4162f4317984bb8c9da9b4481429b18df2334e8ecd96b43b
Filename [email protected]
Package chai
Version 4.1.2
PURL pkg:npm/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/chai/-/chai-4.1.2.tgz

Timeline

First seen 2 Aug 2026 03:59 UTC
First analyzed 2 Aug 2026 04:00 UTC
Last analyzed 21 Aug 2026 02:37 UTC
Last updated 21 Aug 2026 02:37 UTC

Labeling

Label unknown
Traits version edf6a