Malicious code in axon-web (npm)

Source: amazon-inspector 395db55c618565f281d33b84b001d9c395ddcd7456ecc8906e5fd6577c16b3f5 On module load, index.js reads os.hostname and process.env.USER/USERNAME and encodes them into a subdomain of an interactsh oast.fun out-of-band collector, then performs a DNS resolution against that subdoma...

Malicious code in @axon-web/icons (npm)

Source: amazon-inspector 579025dc4de76ecd9400215e99d550cb4579ab6eb7d78e4c3c91a2299ff59c91 On require, index.js constructs an identifier from os.hostname and process.env.USER/USERNAME and issues a DNS resolve against a subdomain of nxsqlpejfpamagxctjyv4c9qj1gfdtzwi.oast.fun — an interactsh/OAST...

MAL-2026-18433 Malicious code in @axon-web/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee650ff91eeb70cc76f880c6b66b586b21c471c95eac22a9e23160aaffa45a58 The package is advertised as an SVG icon library but, on require, runs an IIFE that constructs an identifier from os.hostname and...

Malicious code in @axon-web/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee650ff91eeb70cc76f880c6b66b586b21c471c95eac22a9e23160aaffa45a58 The package is advertised as an SVG icon library but, on require, runs an IIFE that constructs an identifier from os.hostname and...