WS-2019-0391

Axioss is a malicious package that uploads system information such as OS and hostname to a remote server...

Malicious code in axioss (npm)

The package axioss was found to contain malicious code...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15242...

MAL-2025-15242 Malicious code in axioss (npm)

The package axioss was found to contain malicious code...

fd-dcc (>=1.0.0, <=2.1.4), test_sdk_aki (>=1.0.3, <=1.0.4) +1 more potentially affected by unknown CVE via axioss (0.0.1-security)

axioss NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axioss and may be impacted: - fd-dcc =1.0.0, =1.0.3, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8W9J-6WG6-QV4F...