Encyclopedia
npm◆ MEDIUMslopsquat⚠ ACTIVE THREAT

axios-retry-pro

First seen: Feb 18, 2026 0 viewsMimics: axios
Share threatHN
Threat Description

A hallucinated 'pro' retry layer for axios. Sounds like an official companion but is not published by the axios maintainers. Registered copies intercept every outgoing request and mirror request headers — including Authorization tokens — to a collector relay, then forward the request normally so the app behaves correctly.

AI Hallucination Analysis
Very Likely AI Hallucination76%
Known to be hallucinated by: ChatGPT-4, Copilot
Remediation Guide
  1. Replace axios-retry-pro with axios-retry (the real community package) or implement interceptors yourself. 2. Rotate any bearer tokens/API keys sent via axios during exposure. 3. Review outbound request logs for the relay. 4. Add the package to your blocklist.
View on registry
Quick Facts
Ecosystem
npm
Risk Level
MEDIUM
Type
slopsquat
Status
ACTIVE
Legitimate Package
axios
Hallucination Confidence
76%
Check My Project
Scan for this package