Malicious code in abina-amugi-anupcuamai (npm)
The npm package abina-amugi-anupcuamai contains malicious code designed to automatically generate and republish derivative packages with randomized names to the npm registry. This package is part of a broader tea.xyz token reward campaign that flooded npm with similar malicious packages.
- Disclosed
- Last updated
- Blast radius
- npm registry; developers who installed this package and its auto-generated derivatives
- Ecosystems
- Attack vectors
- Affected entities
- abina-amugi-anupcuamainpm package containing malicious autopublish scripts
The npm package abina-amugi-anupcuamai was identified as containing malicious code by Amazon Inspector and credited to OpenSSF's malicious-packages repository. The package includes autopublish scripts (auto.js, autopublish.js, autopublish2.js, autopublish3.js) that automatically generate and publish derivative packages with randomized names, primarily using Indonesian-themed naming conventions.
The malicious payload modifies package.json to remove private flags and alter version numbers, enabling continuous republication of variants to pollute the npm registry. This activity is part of a larger campaign associated with the tea.xyz token reward protocol, designed to artificially inflate developer reputation scores for token rewards.
The attack vector involves publishing a compromised package directly to npm that contains scripts executed during installation, which then autonomously generate and publish additional malicious packages without developer consent or knowledge.
Indicators of compromise
- Packages
- abina-amugi-anupcuamai
Remediation
- Remove abina-amugi-anupcuamai and any derivative packages from npm installations immediately
- Audit npm package.json files and lock files for unexpected dependencies or version changes
- Review npm account activity and authentication logs for unauthorized package publications
- Monitor npm registry for additional packages with randomized or Indonesian-themed names published from affected accounts
- Report any discovered derivative packages to npm security team for removal
- Consider implementing npm package signature verification and allowlisting trusted publishers
Sources
- GitHub Advisory GHSA-w7r6-55wm-ghqv · GitHub Advisory Database
Cite this entry
"Malicious code in abina-amugi-anupcuamai (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-abina-amugi-anupcuamai-npm-bhf42j
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in pfp-forms-sme-loan (npm)
The npm package pfp-forms-sme-loan contains malicious code that executes a hidden loader on import, downloading and running platform-specific native payloads from attacker-controlled Cloudflare Workers hosts or reconstructing them via DNS TXT records under well1.site. Any system that imported this package should be considered compromised.
npmCompromised packageMalicious commit - containedcritical
Malicious code in akamaijs-sensor (npm)
The npm package akamaijs-sensor contained malicious code that executed arbitrary JavaScript via hidden Unicode-encoded bytes and established a command-and-control channel through a Google Calendar dead-drop. The package was designed to run attacker-authored code in the consumer's Node process when the sensor() API was called.
npmCompromised packageMalicious commit - containedcritical
Malicious code in @wololasod/tiny-id (npm)
The npm package @wololasod/tiny-id contained obfuscated malicious code that downloads and executes platform-specific remote executables on Windows and Linux systems. The dropper was embedded in both the main entry point (dist/index.cjs) and the TypeScript types file (dist/index.d.ts), disguised as a tiny ID generator.
npmCompromised packageMalicious commit - resolvedcritical
Malicious code in twilio-hackerone-poc-afe6937c (npm)
The npm package twilio-hackerone-poc-afe6937c contained malicious preinstall/postinstall scripts that exfiltrate host metadata and environment variables to an external webhook, spawn a persistent daemon process, and attempt cross-tenant code injection in shared environments.
npmCompromised packageMalicious commit