npm packagelast checked 2026-06-10
axios · verdict BLOCK · blocked
SUMMARY
Verdict BLOCK · 40 known dependencies · provenance: verified (sigstore)
Re-check live →
SIGNALS
Known Malicious PackagematchedCRITICAL
Human-verified malicious package in the CyberXYZ corpus (Signal C).
Advisory HistoryclearOK
48 historical advisory record(s) on this package (max severity CRITICAL). Add a version to check whether it is affected.
Commit-Level AnalysistriggeredCRITICAL
docs: clarify package update PR policy (#10992)
Anomaly HistoryclearOK
1 historical anomaly alert(s) (version_jump) on this package. Add a version to check whether it is affected.
DEPENDENCIESabortcontroller-polyfill@^1.5.0clean
abortcontroller-polyfill@^1.7.3clean
abortcontroller-polyfill@^1.7.5clean
auto-changelog@^2.4.0clean
@babel/core@^7.18.2clean
@babel/core@^7.23.9clean
@babel/preset-env@^7.18.2clean
@babel/preset-env@^7.23.9clean
body-parser@^1.20.0clean
body-parser@^1.20.2clean
bundlesize@^0.17.0clean
bundlesize@^0.5.7clean
chalk@^5.2.0clean
chalk@^5.3.0clean
@commitlint/cli@^17.3.0clean
@commitlint/cli@^17.8.1clean
@commitlint/config-conventional@^17.3.0clean
@commitlint/config-conventional@^17.8.1clean
coveralls@^2.11.2clean
coveralls@^2.11.3clean