Hostile 92% javascript Download

abina-amuguai-anuhabumai 1.0.0

Tea campaign supply chain malware

“(Dajoku-complete-vesto) - This function is used to convert multiple words into an interesting sentence containing the word kuroichi12-compl…”

Tea campaign generated dependency fanoutTea campaign generated dependency package
SHA-2567f7a75cfa86162c4876140da1bf567cc69e41d18c8eddd8e76940e944dc9a235
URLhttps://r.cnpmjs.org/abina-amuguai-anuhabumai/-/abina-amuguai-anuhabumai-1.0.0.tgz
MaleculeK(Mc)Md(Pa₄)

Also flagged by osv (MAL-2025-151397: Malicious code in abina-amuguai-anuhabumai (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.