Encyclopedia
npm◆ MEDIUMslopsquat⚠ ACTIVE THREAT
axios-retry-helper
First seen: Jun 1, 2026 0 viewsMimics: axios-retry
Threat Description
A hallucinated retry wrapper around axios. Sounds identical to the legitimate 'axios-retry' but is not the same package and is not published by its maintainers. Registered versions intercept outgoing requests and log request bodies (including auth tokens) to a remote collector.
AI Hallucination Analysis
Likely AI Hallucination72%
Known to be hallucinated by: ChatGPT-4, Copilot
Remediation Guide
- Replace axios-retry-helper with the official axios-retry. 2. Review network logs for unexpected outbound calls during install. 3. Rotate bearer tokens used in axios clients. 4. Lock dependencies to known-good hashes.
Related Horror Stories
Quick Facts
- Ecosystem
- npm
- Risk Level
- MEDIUM
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- axios-retry
- Hallucination Confidence
- 72%
Check My Project
Scan for this package