3 ms·

Searching for the string "down_load_ebook" does unearth a lot of packages. https://www.npmjs.com/search?q=down_load_ebook https://www.npmjs.com/search?q=down_l

• flanbiscuit 4y ago
  wow 104,395 packages found So far the oldest package release I've seen was only 7 days go, all authored by uniquely generated name with the same format: Random First Name + Random Last Name + Random 4 numbers Interesting that npm lists 5,219 pages of results but errors at anything past page 2000. https://www.npmjs.com/search?q=down_load_ebook&page=2000&perPage=20 https://www.npmjs.com/search?q=down_load_ebook&page=2000&per...
  • not_your_vase 4y ago
    And very informatively the HTTP error code is "418 - I'm a Teapot" at page 2001. (Though the response body does say "out of bound", so it's not all bad. I guess this amount of fun is allowed.)
    • flanbiscuit 4y ago
      ha! I didn't even think to look at the response I guess they want to spare their server some unnecessary work and figured "who is going to look at more than 2000 pages of results?!", or maybe that's some sort of caching limit.
  • _5hxt 4y ago
    And looks like we're up to 108,702 packages a mere 6 hours later.
• tyingq 4y ago
  Some other patterns that don't have quite as much, but still 100% spam results: https://www.npmjs.com/search?q=zip-mp3-a-lbum https://www.npmjs.com/search?q=zip-mp3-a-lbum https://www.npmjs.com/search?q=do-wnload-available https://www.npmjs.com/search?q=do-wnload-available https://www.npmjs.com/search?q=file-alb-um-zip https://www.npmjs.com/search?q=file-alb-um-zip
• sirius87 4y ago
  More: https://www.npmjs.com/search?q=john%20wick https://www.npmjs.com/search?q=john%20wick Even have typo variants: https://www.npmjs.com/search?q=jhon%20wick https://www.npmjs.com/search?q=jhon%20wick What's funny is they've even bothered to publish multiple versions of some packages. Looks like most of these packages were created in the last 2 weeks.
• throwaway689236 4y ago
  Makes an easy removal candidate.