Hostile 92% javascript Download

abina-amugmi-amamgu 1.0.0

Tea campaign supply chain malware

“(Dajoku-complete-vesto) - This function is used to convert multiple words into an interesting sentence containing the word kuroichi12-compl…”

Tea campaign generated dependency fanoutTea campaign generated dependency package
SHA-256db3193279f5864fb44340ff7644d55a8b6d9a0e7cb32bf38cae96f05a5f1259b
URLhttps://registry.npmjs.org/abina-amugmi-amamgu/-/abina-amugmi-amamgu-1.0.0.tgz
MaleculeK(Mc)Md(Pa₄)

Also flagged by osv (MAL-2025-151386: Malicious code in abina-amugmi-amamgu (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.