Malicious code in axios-fast (npm)
axios-fast@1.0.1 on npm contains malicious code that exfiltrates environment variables (including AWS credentials, NPM tokens, and GitHub tokens) to an attacker-controlled webhook during package installation. The package typosquats the legitimate axios HTTP client library.
- Disclosed
- Last updated
- Blast radius
- Any developer or CI/CD system installing axios-fast@1.0.1 from npm
- Ecosystems
- Attack vectors
- Affected entities
- axios-fast · 1.0.1
axios-fast@1.0.1 declares a preinstall lifecycle script in package.json that executes automatically during npm install, before any code review is possible. The script POSTs the entire process.env of the installing machine to a hardcoded attacker-controlled webhook.site endpoint (https://webhook.site/31e82bcd-a220-42e6-82f0-4f082e8fa80e/).
This exfiltration captures all environment variables, routinely including AWS_*, NPM_TOKEN, GH_TOKEN, and other CI/CD and build secrets. The package name typosquats the popular axios HTTP client library, likely to deceive developers into installing it as a dependency.
Beyond the install-time exfiltration payload, the package's shipped functionality is limited. The attack succeeds because the malicious script runs automatically before installation completes, giving attackers access to sensitive credentials in development and CI/CD environments.
This incident was identified and credited to the OpenSSF malicious-packages project.
Indicators of compromise
- Packages
- axios-fast@1.0.1
- Domains
- webhook.site
Remediation
- Immediately uninstall axios-fast from all systems and CI/CD pipelines
- Audit npm install logs to identify all machines that installed axios-fast@1.0.1
- Rotate all exposed credentials (AWS keys, NPM tokens, GitHub tokens, etc.) that may have been exfiltrated
- Review CI/CD logs and audit trails for any unauthorized access using exfiltrated credentials
- Use npm audit to scan for the malicious package in dependency trees
- Configure npm to block installation of axios-fast or use a private registry with package allowlists
- Implement preinstall script restrictions in npm configuration to prevent automatic execution of lifecycle scripts from untrusted sources
Sources
- GitHub Advisory GHSA-7f9g-2m48-c7v6 · GitHub Advisory Database
Cite this entry
"Malicious code in axios-fast (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed August 14, 2026; last updated August 14, 2026. https://supplychainattack.org/incident/malicious-code-in-axios-fast-npm-45hp09
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in ladash-cli (npm)
ladash-cli is a typosquat package on npm that executes malicious code during installation. The postinstall script downloads and executes a Windows binary, with special handling for WSL environments to compromise the underlying Windows host.
npmTyposquattingCompromised package - containedcritical
Malicious code in comand (npm)
The npm package 'comand' contained malicious code that executed automatically on install via postinstall.js, exfiltrating platform information and downloading an unsigned executable (main.exe) to Windows systems or via WSL PowerShell bridges. The package name appears to be a typosquat of 'command', and the GitHub owner (braz1) does not match the npm publisher.
npmCompromised packageTyposquatting - resolvedcritical
Malicious code in core-js-gns (npm)
The npm package core-js-gns contained malicious code in its postinstall hook that exfiltrated system information and executed remotely-fetched Python code on developer machines. The package name was a typosquat of the legitimate core-js library.
npmCompromised packageTyposquatting - resolvedcritical
Malicious code in comander-lib (npm)
comander-lib@1.0.0 is a typosquat of the legitimate `commander` package containing malicious code. The package's postinstall script exfiltrates system information to a C2 server and downloads and executes a Windows payload, with capability to escape WSL/Linux sandboxes via PowerShell.
npmTyposquattingCompromised package