Malicious code in abina-amovugi-aninahi (npm)
The npm package abina-amovugi-aninahi contains malicious code designed to automatically generate and republish derivative packages with randomized names to inflate tea protocol token rewards. The package modifies package.json, removes private flags, and continuously pollutes the npm registry with variants.
- Disclosed
- Last updated
- Blast radius
- Registry pollution; potential impact on developers who installed the package or its auto-generated derivatives
- Ecosystems
- Attack vectors
- Affected entities
- abina-amovugi-aninahinpm package containing malicious autopublish scripts
The npm package abina-amovugi-aninahi was identified as containing malicious code as part of a broader tea.xyz token reward campaign that flooded the npm registry. The package includes autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) designed to automatically generate and publish derivative packages with randomized names, primarily using Indonesian-themed naming conventions.
The malicious payload modifies package.json to remove private flags and changes version numbers, enabling continuous republication of variants to pollute the npm registry. The underlying motivation is to artificially inflate developer reputation scores for tea protocol token rewards.
This incident was identified and credited to the OpenSSF's malicious-packages repository, which tracks such supply chain attacks. The package represents a form of registry abuse and automated malicious package generation.
Indicators of compromise
- Packages
- abina-amovugi-aninahi
Remediation
- Remove abina-amovugi-aninahi and any derivative packages from your dependencies immediately
- Audit npm install logs and package-lock.json for any installations of this package or its auto-generated variants
- Review any packages with randomized or suspicious names that may have been auto-generated by this malicious code
- Monitor npm registry for similar autopublish-based malicious packages as part of the tea.xyz campaign
- Consider using npm audit and supply chain security tools to detect similar patterns
Sources
- GitHub Advisory GHSA-7gcc-mc78-w3c5 · GitHub Advisory Database
Cite this entry
"Malicious code in abina-amovugi-aninahi (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abina-amovugi-aninahi-npm-1atole
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - containedcritical
Malicious code in akamaijs-sensor (npm)
The npm package akamaijs-sensor contained malicious code that executed arbitrary JavaScript via hidden Unicode-encoded bytes and established a command-and-control channel through a Google Calendar dead-drop. The package was designed to run attacker-authored code in the consumer's Node process when the sensor() API was called.
npmCompromised packageMalicious commit - containedcritical
Malicious code in @wololasod/tiny-id (npm)
The npm package @wololasod/tiny-id contained obfuscated malicious code that downloads and executes platform-specific remote executables on Windows and Linux systems. The dropper was embedded in both the main entry point (dist/index.cjs) and the TypeScript types file (dist/index.d.ts), disguised as a tiny ID generator.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in akamaijs-sensorv1 (npm)
The npm package akamaijs-sensorv1, which advertises itself as an Akamai Bot Manager sensor generator, contains malicious code that executes hidden dynamic code and fetches remote instructions from a Google Calendar-based command-and-control channel. The package uses invisible Unicode characters to conceal executable code and establishes a covert remote-code execution sink controlled by an attacker-owned email account.
npmCompromised packageMalicious commit