Searching for the string "down_load_ebook" does unearth a lot of packages. https://www.npmjs.com/search?q=down_load_ebook
About 100k spam packages, with no false positives that I can see.
About 100k spam packages, with no false positives that I can see.
So far the oldest package release I've seen was only 7 days go, all authored by uniquely generated name with the same format:
Random First Name + Random Last Name + Random 4 numbers
https://www.npmjs.com/search?q=down_load_ebook&page=2000&per...
(Though the response body does say "out of bound", so it's not all bad. I guess this amount of fun is allowed.)
I guess they want to spare their server some unnecessary work and figured "who is going to look at more than 2000 pages of results?!", or maybe that's some sort of caching limit.
https://www.npmjs.com/search?q=zip-mp3-a-lbum
Even have typo variants: https://www.npmjs.com/search?q=jhon%20wick
What's funny is they've even bothered to publish multiple versions of some packages. Looks like most of these packages were created in the last 2 weeks.