Malicious Package

Overview axois-http is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in axois-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69703c3a809c078834e321ae3777e144413bcef3d17ea7a712d6108f9ca34885 axois-http is a typosquat of axios index.js exports an empty object. Its scripts/postinstall.js unconditionally POSTs a JSON body containing a...

MAL-2026-14163 Malicious code in axois-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69703c3a809c078834e321ae3777e144413bcef3d17ea7a712d6108f9ca34885 axois-http is a typosquat of axios index.js exports an empty object. Its scripts/postinstall.js unconditionally POSTs a JSON body containing a...

MAL-2026-4494 Malicious code in axois-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eb1a16cb7cac016f30a49f81d472b9b4e02236b97c5daaea4446b74e6aa069 The package name is a single-character transposition of axios. package.json declares preinstall, install, and postinstall hooks all pointing at...

Malicious Package

Overview axois-utils is a malicious package. This package contains malicious code that includes infostealer malware, one of which is a Shai-Hulud clone following the TeamPCP open source release, and one DDoS botnet package. While this package might be attempting to impersonate a valid organizatio...

WS-2019-0392

Axois is a malicious package designed to take advantage of users making a mistake when typing name of a module to install and eventually can lead to execution of arbitrary commands...

Malicious code in axois-helper (npm)

The package axois-helper was found to contain malicious code...

MAL-2025-47432 Malicious code in axois-helper (npm)

The package axois-helper was found to contain malicious code...

Malicious code in axois (npm)

The package axois was found to contain malicious code...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

MAL-2025-15245 Malicious code in axois (npm)

The package axois was found to contain malicious code...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

PT-2020-21565

Name of the Vulnerable Software and Affected Versions axois affected versions not specified Description The issue concerns a malicious package designed to exploit users who mistakenly install it due to a typo in the module name. Upon execution, the package communicates with a Command and Control...