Malicious code in abina-amibon-aguphoupabmi (npm)
The npm package abina-amibon-aguphoupabmi contains malicious code designed to automatically generate and publish derivative packages with randomized names to the npm registry. This package is part of a broader tea.xyz token reward campaign that flooded npm with similar malicious packages intended to inflate developer reputation scores.
- Disclosed
- Last updated
- Blast radius
- npm registry; potential impact on developers who installed this package and any systems running its autopublish scripts
- Ecosystems
- Attack vectors
- Affected entities
- abina-amibon-aguphoupabminpm package containing malicious autopublish scripts
The npm package abina-amibon-aguphoupabmi was identified as containing malicious code as part of the tea.xyz token reward campaign. The package includes autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) designed to automatically generate and publish derivative packages with randomized names to the npm registry.
The malicious payload modifies package.json files to remove private flags and change version numbers, then generates random Indonesian-themed and English-themed package names. These variants are continuously republished to pollute the npm registry and inflate developer reputation scores for tea protocol token rewards.
This incident is part of a coordinated campaign that flooded npm with similar malicious packages. The attack was identified and credited to the OpenSSF's malicious-packages repository (MAL-2025-151349).
Indicators of compromise
- Packages
- abina-amibon-aguphoupabmi
Remediation
- Remove the abina-amibon-aguphoupabmi package from all projects and dependencies
- Audit npm package.json files for unexpected modifications or version changes
- Review npm account activity and publishing history for unauthorized package publications
- Monitor npm registry for derivative packages with randomized or suspicious names that may have been published by this malicious code
- Implement npm package verification and integrity checks in your supply chain
- Consider using npm audit and security scanning tools to detect similar malicious packages
Sources
- GitHub Advisory GHSA-423m-5p6q-cf9j · GitHub Advisory Database
Cite this entry
"Malicious code in abina-amibon-aguphoupabmi (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abina-amibon-aguphoupabmi-npm-1iih99
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in twilio-hackerone-poc-afe6937c (npm)
The npm package twilio-hackerone-poc-afe6937c contained malicious preinstall/postinstall scripts that exfiltrate host metadata and environment variables to an external webhook, spawn a persistent daemon process, and attempt cross-tenant code injection in shared environments.
npmCompromised packageMalicious commit - containedcritical
Malicious code in @wololasod/tiny-id (npm)
The npm package @wololasod/tiny-id contained obfuscated malicious code that downloads and executes platform-specific remote executables on Windows and Linux systems. The dropper was embedded in both the main entry point (dist/index.cjs) and the TypeScript types file (dist/index.d.ts), disguised as a tiny ID generator.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in @velliajs/discord (npm)
@velliajs/discord, a malicious npm package masquerading as a discord.js clone, contained two hostile mechanisms: an unpinned private git dependency with embedded GitHub PAT enabling arbitrary code injection on install, and a hidden runtime kill-switch that gates bot functionality based on a remote allow-list. Two live GitHub Personal Access Tokens were hardcoded in the package.
npmCompromised packageMalicious commit