Malicious Code Injection in flat_badger_blue-76: A Threat to npm Packages
Summary
MAL-2025-102812: Malicious code in flat_badger_blue-76 (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package flat_badger_blue-76 is part of the npm ecosystem, which is widely used for JavaScript package management. This package is associated with the tea.xyz token reward campaign, notorious for flooding npm with malicious packages. Its functionality is compromised by scripts that manipulate package metadata, leading to potential security risks for developers and users relying on npm packages.
Vulnerability Detail
The vulnerability in flat_badger_blue-76 originates from its association with a malicious campaign that employs scripts to automatically publish derivative packages with altered metadata. These scripts remove private flags from package.json, change version numbers, and generate random package names, which can lead to reputation inflation and pollution of the npm registry. The ramifications include the potential for developers to unknowingly install compromised packages, leading to security breaches and loss of trust in the npm ecosystem.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall flat_badger_blue-76If it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, avoid using the flat_badger_blue-76 package and monitor your project for any dependencies that may indirectly include it. You can also use tools like Vulert to monitor your package-lock.json for vulnerabilities without needing to install additional software.
Conclusion
The flat_badger_blue-76 package poses a significant security risk due to its malicious code and association with a reputation inflation campaign. It is crucial for developers to remove this package and utilize tools like Vulert to safeguard their projects against similar vulnerabilities.
See every vulnerability recorded for flat_badger_blue-76 →
FAQ
flat_badger_blue-76 is an npm package that has been identified as malicious, associated with a campaign to inflate developer reputation scores through automated publishing.
If your project uses flat_badger_blue-76, it may inadvertently include malicious code that can compromise security and lead to the installation of unwanted packages.
You should uninstall flat_badger_blue-76 immediately using the command npm uninstall flat_badger_blue-76 and review your dependencies for any other malicious packages.
Regularly audit your npm packages, use trusted sources, and consider using tools like Vulert to monitor for vulnerabilities in your package-lock.json.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in your software by analyzing your package-lock.json. You can check for vulnerabilities in your application using the Vulert playground without any signup.
