Malicious Code Vulnerability in managerial_badger-appteadev: Exploitation of npm Package Registry
Summary
MAL-2025-105585: Malicious code in managerial_badger-appteadev (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
managerial_badger-appteadev is an npm package that is part of a broader campaign involving the tea.xyz token reward system. This package, like others in the campaign, is designed to manipulate the npm registry by generating and publishing numerous derivative packages with randomized names. Its primary function is to inflate developer reputation scores for token rewards, but this comes at the cost of security and integrity within the npm ecosystem.
Vulnerability Detail
The vulnerability in managerial_badger-appteadev originates from its malicious intent to modify package.json files by removing private flags and altering version numbers. It generates random package names, often themed around Indonesian culture, and continuously republishes these variants to pollute the npm registry. This behavior can lead to significant security risks, including the potential for dependency confusion, unauthorized access to sensitive data, and the degradation of the npm ecosystem's reliability.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall managerial_badger-appteadevIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can avoid using the managerial_badger-appteadev package and look for alternative packages that provide similar functionality without the associated risks. Additionally, consider using tools like Vulert to monitor your package dependencies for vulnerabilities.
Conclusion
The managerial_badger-appteadev package poses a significant security risk due to its malicious code designed to manipulate the npm registry. It is crucial for developers to remove this package from their projects and to utilize tools like Vulert for ongoing monitoring of vulnerabilities in their dependencies.
See every vulnerability recorded for managerial_badger-appteadev →
FAQ
The vulnerability involves malicious code that modifies package.json files and floods the npm registry with derivative packages.
You can use Vulert, which monitors your package-lock.json for vulnerabilities. Visit Vulert Scanner to check your application without needing to sign up.
Using this package can lead to dependency confusion, unauthorized data access, and overall degradation of the npm ecosystem's integrity.
Regularly audit your dependencies, use trusted packages, and employ tools like Vulert to monitor for vulnerabilities in real-time.
Immediately uninstall the package using 'npm uninstall managerial_badger-appteadev' and replace it with a trusted alternative.
