Malicious code in abina-amibon-aguhoupabmi (npm)
The npm package abina-amibon-aguhoupabmi contains malicious code designed to automatically generate and republish derivative packages with randomized names. This package is part of a broader campaign to inflate developer reputation scores for tea protocol token rewards by polluting the npm registry.
- Disclosed
- Last updated
- Blast radius
- npm registry; developers who installed this package and its auto-generated derivatives
- Ecosystems
- Attack vectors
- Affected entities
- abina-amibon-aguhoupabminpm package containing malicious autopublish scripts
The npm package abina-amibon-aguhoupabmi was identified as containing malicious code as part of the tea.xyz token reward campaign that flooded npm with similar packages. The malicious payload includes autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) designed to automatically generate and publish derivative packages with randomized names.
The attack mechanism modifies package.json to remove private flags, changes version numbers, and generates random Indonesian-themed package names (with some English variants) to continuously republish variants to the npm registry. The goal is to inflate developer reputation scores for tea protocol token rewards through registry pollution.
This incident was identified by Amazon Inspector and credited to the OpenSSF's malicious-packages repository. The package represents a coordinated effort to abuse npm's publishing mechanisms for token reward manipulation.
Indicators of compromise
- Packages
- abina-amibon-aguhoupabmi
Remediation
- Remove abina-amibon-aguhoupabmi and any derivative packages from your dependencies immediately
- Audit your npm install history and project dependencies for any packages with randomized or suspicious names published around the same timeframe
- Review package.json and lock files for unexpected modifications or version changes
- Consider using npm audit and security scanning tools to detect similar malicious packages
- Report any suspicious packages to npm security team
- Implement stricter dependency review processes and use allowlists for trusted packages
Sources
- GitHub Advisory GHSA-3qhq-jrcr-q9wq · GitHub Advisory Database
Cite this entry
"Malicious code in abina-amibon-aguhoupabmi (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abina-amibon-aguhoupabmi-npm-14bhwf
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in akamaijs-sensorv1 (npm)
The npm package akamaijs-sensorv1, which advertises itself as an Akamai Bot Manager sensor generator, contains malicious code that executes hidden dynamic code and fetches remote instructions from a Google Calendar-based command-and-control channel. The package uses invisible Unicode characters to conceal executable code and establishes a covert remote-code execution sink controlled by an attacker-owned email account.
npmCompromised packageMalicious commit - containedcritical
Malicious code in akamaijs-sensor (npm)
The npm package akamaijs-sensor contained malicious code that executed arbitrary JavaScript via hidden Unicode-encoded bytes and established a command-and-control channel through a Google Calendar dead-drop. The package was designed to run attacker-authored code in the consumer's Node process when the sensor() API was called.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in @velliajs/discord (npm)
@velliajs/discord, a malicious npm package masquerading as a discord.js clone, contained two hostile mechanisms: an unpinned private git dependency with embedded GitHub PAT enabling arbitrary code injection on install, and a hidden runtime kill-switch that gates bot functionality based on a remote allow-list. Two live GitHub Personal Access Tokens were hardcoded in the package.
npmCompromised packageMalicious commit