Threat Description
Typosquat of 'axios'. The package intercepts all outgoing HTTP requests made through it and logs Authorization headers to a remote collector before forwarding the request, making the interception nearly invisible.
AI Hallucination Analysis
Unlikely AI Hallucination15%
Known to be hallucinated by: n/a (typosquat)
Remediation Guide
- Remove 'axio' from your dependencies immediately.
- Replace with the legitimate package 'axios'.
- Audit imports/usages of the malicious package.
- Rotate any API keys or bearer tokens that may have been logged.
Quick Facts
- Ecosystem
- npm
- Risk Level
- HIGH
- Type
- typosquat
- Status
- ACTIVE
- Legitimate Package
- axios
- Hallucination Confidence
- 15%
Check My Project
Scan for this package