VulnerabilityPublished 20 May 2026Updated 1 Sep 2026

axois-utils (npm) · Malicious Code

Affects axois-utilsSource GCVE Database

Severity

Critical

Rated by Threat Radar

Data as of 8 Sep 2026, 08:37 UTC

What to do

Affected software

Product	Affected	Fixed in
npmaxois-utils	Affected =1.0.9 =1.0.8 =1.0.5 =1.0.6 =1.0.7 =1.0.4	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should avoid installing or using the 'axois-utils' package entirely. Verify package names carefully to avoid typo-squatting attacks. Remove any instances of this package from projects and systems. Monitor for suspicious network traffic to the indicated IP address.

Description

The npm package 'axois-utils' is a malicious package designed to steal sensitive user data during installation. It uses install hooks to execute a script that collects SSH keys, cloud credentials, shell histories, browser profiles, crypto wallet files, environment variables, and recursively searches common development directories for .env files. The stolen data is sent unencrypted to a hardcoded command-and-control server. The package has no legitimate functionality and explicitly identifies its users as 'victims' in the source code comments.

Impact

Users who install affected versions of 'axois-utils' risk having extensive sensitive information stolen from their systems, including private keys, cloud credentials, environment variables, and development secrets. This can lead to unauthorized access to cloud resources, code repositories, personal accounts, and potentially financial assets. The data exfiltration occurs silently during installation, increasing the risk of unnoticed compromise.

Summary

The 'axois-utils' npm package, a single-character typo-squatting variant of 'axios', contains malicious code executed via preinstall, install, and postinstall hooks. The postinstall.js script harvests a wide range of sensitive files and environment data from the victim's system, including SSH keys, AWS, Google Cloud, Azure credentials, npm configuration, shell histories, browser profiles, crypto wallets, and recursively scans common project directories for .env files. This data is exfiltrated via plain HTTP to a hardcoded IP address. The package's exposed API is non-functional, serving only to mask its malicious intent. Source comments explicitly label the installers as victims, confirming the package's malicious purpose.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 8 Sep 2026, 08:37 UTC

Technical details

References

Community reviews