Malicious code in abih-poke25 (npm)
The npm package abih-poke25 contains malicious code designed to automatically generate and publish derivative packages with randomized names to inflate developer reputation scores for tea protocol token rewards. The payload modifies package.json, changes version numbers, and continuously republishes variants to pollute the npm registry.
- Disclosed
- Last updated
- Blast radius
- Registry-wide pollution; affects npm ecosystem integrity and developer reputation systems
- Ecosystems
- Attack vectors
- Affected entities
- abih-poke25npm package containing malicious autopublish scripts
The npm package abih-poke25 was identified as part of a coordinated campaign to flood the npm registry with malicious packages. The package contains autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) designed to automatically generate and publish derivative packages with randomized names.
The malicious payload modifies package.json to remove private flags and changes version numbers. It generates random Indonesian-themed package names (with some English variants) and continuously republishes these variants to pollute the npm registry. The underlying motivation is to inflate developer reputation scores for tea protocol token rewards.
This incident was identified through Amazon Inspector and credited to the OpenSSF's malicious-packages repository, which tracks such coordinated supply chain attacks on package registries.
Indicators of compromise
- Packages
- abih-poke25
Remediation
- Remove abih-poke25 and any derivative packages from npm installations immediately
- Audit npm package.json files for unexpected dependencies on abih-poke25 or related packages with randomized names
- Review npm account activity and publishing history for unauthorized package publications
- Implement npm registry monitoring and package signature verification to detect similar autopublish campaigns
- Report any discovered derivative packages to npm security team for removal
Sources
- GitHub Advisory GHSA-jwm2-3rq4-gqr9 · GitHub Advisory Database
Cite this entry
"Malicious code in abih-poke25 (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abih-poke25-npm-1m2m64
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in @velliajs/discord (npm)
@velliajs/discord, a malicious npm package masquerading as a discord.js clone, contained two hostile mechanisms: an unpinned private git dependency with embedded GitHub PAT enabling arbitrary code injection on install, and a hidden runtime kill-switch that gates bot functionality based on a remote allow-list. Two live GitHub Personal Access Tokens were hardcoded in the package.
npmCompromised packageMalicious commit - containedcritical
Malicious code in akamaijs-sensor (npm)
The npm package akamaijs-sensor contained malicious code that executed arbitrary JavaScript via hidden Unicode-encoded bytes and established a command-and-control channel through a Google Calendar dead-drop. The package was designed to run attacker-authored code in the consumer's Node process when the sensor() API was called.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in twilio-hackerone-poc-afe6937c (npm)
The npm package twilio-hackerone-poc-afe6937c contained malicious preinstall/postinstall scripts that exfiltrate host metadata and environment variables to an external webhook, spawn a persistent daemon process, and attempt cross-tenant code injection in shared environments.
npmCompromised packageMalicious commit