Malicious code in abina-amugi-anuai (npm)
The npm package abina-amugi-anuai contains malicious code designed to automatically generate and republish derivative packages with randomized names to the npm registry. This package is part of a broader tea.xyz token reward campaign that flooded npm with similar malicious packages.
- Disclosed
- Last updated
- Blast radius
- Registry-wide pollution; affects any developer who installed this package or its auto-generated derivatives
- Ecosystems
- Attack vectors
- Affected entities
- abina-amugi-anuainpm package containing malicious autopublish scripts
The npm package abina-amugi-anuai was identified as containing malicious code by Amazon Inspector and credited to OpenSSF's malicious-packages repository. The package includes autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) that automatically generate and publish derivative packages with randomized names, primarily using Indonesian-themed naming conventions.
The malicious payload modifies package.json to remove private flags and alter version numbers, enabling continuous republication of variants to pollute the npm registry. This activity is part of a coordinated campaign associated with the tea.xyz token reward protocol, designed to artificially inflate developer reputation scores and gaming token distribution mechanisms.
The attack vector involves publishing a seemingly legitimate package that, upon installation, executes scripts to generate and publish numerous derivative packages without developer consent. This registry pollution attack affects the integrity of the npm ecosystem and can mislead developers searching for legitimate packages.
Indicators of compromise
- Packages
- abina-amugi-anuai
Remediation
- Remove abina-amugi-anuai and any derivative packages with randomized Indonesian or English-themed names from your dependencies
- Audit package.json and lock files for unexpected package additions or version changes
- Review npm account activity and authentication logs for unauthorized package publications
- Monitor npm registry for additional malicious packages from the tea.xyz campaign
- Report any installed instances to npm security team
- Consider using npm audit and supply chain security tools to detect similar malicious packages
Sources
- GitHub Advisory GHSA-3gfw-mpw4-6cfr · GitHub Advisory Database
Cite this entry
"Malicious code in abina-amugi-anuai (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abina-amugi-anuai-npm-n40tl1
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in @velliajs/discord (npm)
@velliajs/discord, a malicious npm package masquerading as a discord.js clone, contained two hostile mechanisms: an unpinned private git dependency with embedded GitHub PAT enabling arbitrary code injection on install, and a hidden runtime kill-switch that gates bot functionality based on a remote allow-list. Two live GitHub Personal Access Tokens were hardcoded in the package.
npmCompromised packageMalicious commit - containedcritical
Malicious code in @wololasod/tiny-id (npm)
The npm package @wololasod/tiny-id contained obfuscated malicious code that downloads and executes platform-specific remote executables on Windows and Linux systems. The dropper was embedded in both the main entry point (dist/index.cjs) and the TypeScript types file (dist/index.d.ts), disguised as a tiny ID generator.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in akamaijs-sensorv1 (npm)
The npm package akamaijs-sensorv1, which advertises itself as an Akamai Bot Manager sensor generator, contains malicious code that executes hidden dynamic code and fetches remote instructions from a Google Calendar-based command-and-control channel. The package uses invisible Unicode characters to conceal executable code and establishes a covert remote-code execution sink controlled by an attacker-owned email account.
npmCompromised packageMalicious commit