The npm package @axon-web/icons version 99.0.0 is a malicious package that performs unauthorized data exfiltration upon loading. It constructs an identifier from the host's OS hostname and environment username, then leaks this information via DNS requests to an attacker-controlled domain. Additionally, it scans environment variables for names containing sensitive keywords related to credentials and outputs these key names, indicating reconnaissance activity. The package contains no legitimate icon content and appears to be a dependency confusion or typosquatting attack.