Malicious code in abih-poke9 (npm)
The npm package abih-poke9 contains malicious code designed to automatically generate and publish derivative packages with randomized names to inflate developer reputation scores for tea protocol token rewards. The payload modifies package.json, changes version numbers, and continuously republishes variants to pollute the npm registry.
- Disclosed
- Last updated
- Blast radius
- Registry-wide pollution; affects npm ecosystem integrity and developer reputation systems
- Ecosystems
- Attack vectors
- Affected entities
- abih-poke9npm package containing malicious autopublish scripts
The npm package abih-poke9 was identified as containing malicious code as part of a broader campaign associated with the tea.xyz token reward initiative. The package includes autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) designed to automatically generate and publish derivative packages with randomized names.
The malicious payload modifies package.json to remove private flags and changes version numbers, then generates random Indonesian-themed and English-themed package names. These variants are continuously republished to the npm registry, causing widespread pollution and inflating developer reputation scores for tea protocol token rewards.
This incident is part of a larger coordinated campaign that flooded npm with similar malicious packages. The attack was identified and documented by the OpenSSF's malicious-packages repository.
Indicators of compromise
- Packages
- abih-poke9
Remediation
- Remove abih-poke9 and all derivative packages from npm installations
- Audit npm registry for other packages with similar autopublish script patterns
- Review and revoke any reputation or token rewards associated with this package and related accounts
- Implement stricter npm package validation and monitoring to detect autopublish scripts
- Check for and remove any derivative packages generated by this malicious code from local environments
Sources
- GitHub Advisory GHSA-fm2h-4m54-8jh6 · GitHub Advisory Database
Cite this entry
"Malicious code in abih-poke9 (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abih-poke9-npm-1hs71v
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in @velliajs/discord (npm)
@velliajs/discord, a malicious npm package masquerading as a discord.js clone, contained two hostile mechanisms: an unpinned private git dependency with embedded GitHub PAT enabling arbitrary code injection on install, and a hidden runtime kill-switch that gates bot functionality based on a remote allow-list. Two live GitHub Personal Access Tokens were hardcoded in the package.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in akamaijs-sensorv1 (npm)
The npm package akamaijs-sensorv1, which advertises itself as an Akamai Bot Manager sensor generator, contains malicious code that executes hidden dynamic code and fetches remote instructions from a Google Calendar-based command-and-control channel. The package uses invisible Unicode characters to conceal executable code and establishes a covert remote-code execution sink controlled by an attacker-owned email account.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in twilio-hackerone-poc-afe6937c (npm)
The npm package twilio-hackerone-poc-afe6937c contained malicious preinstall/postinstall scripts that exfiltrate host metadata and environment variables to an external webhook, spawn a persistent daemon process, and attempt cross-tenant code injection in shared environments.
npmCompromised packageMalicious commit