{"_id":"@cyberhub/trust-axios","_rev":"10-8b908408053ff148cca751de6ec7ebac","name":"@cyberhub/trust-axios","dist-tags":{"latest":"1.0.9"},"versions":{"1.0.0":{"name":"@cyberhub/trust-axios","version":"1.0.0","keywords":["axios","security","trust-score","vulnerability","pkgtrust","CVE"],"author":{"name":"Nrupak Shah"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.0","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"be670bfb661ef1ef9b4d0f6d4fa2724d1d69d220","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.0.tgz","fileCount":2,"integrity":"sha512-vkXc2xxZUT6ywUl+0WbEb0JuvJYNhac1UF2oeCRHTjP9dC5j1+w5w/1psi+JGJ8YaRSuVl6l3camoOvryIKdeg==","signatures":[{"sig":"MEUCIH61qA9RZgoFZPGEeR6YmEQ3sW5TWddgzyFBC4wZ4/qTAiEA2GISV16dw/Sw7vChdTM418tPFUF8oL3LCO+YyxFQL3o=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1697},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report for axios — 70/100 (B, standard). Maintainer risk and vulnerability analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.0_1775115615591_0.602496455696721","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"@cyberhub/trust-axios","version":"1.0.1","keywords":["axios","security","trust-score","vulnerability","pkgtrust","CVE"],"author":{"name":"Nrupak Shah"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.1","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"86919bbd4f79a82aa05164ce907375ca7e86432d","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.1.tgz","fileCount":2,"integrity":"sha512-odY6Zx16jccxY40eD6fwChEIUNDw6GNgOLgW8ekDVVbI+hc/Qb3XV7OQPyMwtnWz93uwsciYAYANAR8Owy+sRA==","signatures":[{"sig":"MEQCIE2RD0MeMIOPGrY9MMSoinc8MfUWDZEgZdySkuF+L85gAiAXVyCQTh8e4bACobOwmmmPLpCp2U/xMqofQBwZsScXEw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":2868},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report for axios — 62/100 (C+, standard). 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.1_1775117626125_0.5150609532755681","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"@cyberhub/trust-axios","version":"1.0.2","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.2","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"8273f93c983a889b4e8f3b55df1e742e0080a763","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.2.tgz","fileCount":2,"integrity":"sha512-0MXa21BjfN7WP9pSbUmgwGj8uA7+CJ1HjxYe43d+npAqG+sqPQcPevLuM5SdVTgl1TDUEiop274KHHdscSP7Fw==","signatures":[{"sig":"MEQCIA4FQZwEm8Y0/KdVpiun3Yr0S6cMVmSBOjaEtDi0Q5TRAiBHd6Ypj8AyidfLX1TL0v7NwpiinGVUzEqcmZPkhCwj8w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":4615},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 62/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.2_1775118687851_0.5303242728055473","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"@cyberhub/trust-axios","version":"1.0.3","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.3","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"c80af7ccae29d52b34b872a15528ef350fe1dbb7","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.3.tgz","fileCount":2,"integrity":"sha512-+Ov2j6TbCNmN1Zw3JqL+12g+IZLybq2NJ+BKDkuv/teVZkw0GN8LUhUVb4hB91BwJDlwzXvcDn1bgGVYfWVHMg==","signatures":[{"sig":"MEYCIQDLITyavlYMvwSHwazKFCTDT4QKeK0lMVvDrfyZHi/AbwIhANSb/1Yftw2AjTvGiuC9ng8yEFU3y4CAd0r84ASby4zo","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":4069},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 62/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.3_1775156015719_0.8661432347265532","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"@cyberhub/trust-axios","version":"1.0.4","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.4","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"5516bcce4a12cf3affd9c192007275f82a1d5504","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.4.tgz","fileCount":2,"integrity":"sha512-C2jkucYi0lLLlObEbGIcqVFzjySQVfKkP8T3E2ZNfY4PHPxYvdxsnWMeSdVt4elJp03DCVRsIuFfJL2tOzFbQg==","signatures":[{"sig":"MEUCIQC2KmS4pIIaUrbh/jiInEmcjnhXEixUu8LcYsXpNUSjWwIgOiYmMywgnx44bFDEk8PVoJP9jRUANjYXZFmC2SchjvU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":4410},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 64/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.4_1775175273897_0.9706953809785646","host":"s3://npm-registry-packages-npm-production"}},"1.0.5":{"name":"@cyberhub/trust-axios","version":"1.0.5","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.5","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"5db6d7a5d60bbf138eb3f3e122a1469fd9f9619a","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.5.tgz","fileCount":2,"integrity":"sha512-T3fK5coXEgy+LrkuGMz6GSmcnDxjKBJGqPO6/OzWwi4j43xA8NXWMjubfzwyORHlIIkT1oy6/bug+YrDu/SO8w==","signatures":[{"sig":"MEUCIQCeVoCJy0vMlpQnO23vLImN+mPGiqxVisSTdr6X8oCtsQIgfWZTdDCHFCwq6yqGbtyE2q4zRNgFBxn9SDYtsAf1HSM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":8112},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 64/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.5_1775175854479_0.5515636735707405","host":"s3://npm-registry-packages-npm-production"}},"1.0.6":{"name":"@cyberhub/trust-axios","version":"1.0.6","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.6","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"baec3d7d5213b95bb45b90fe768e0605a16f0649","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.6.tgz","fileCount":2,"integrity":"sha512-DNNGS6h7M1s+pNCwGy7QE79sgr5tdFEYpDAhUOScFEGi/+yRb9ODONirrLOI1Yn8AEd7IrB92O6gcxQN7h6VlQ==","signatures":[{"sig":"MEQCIEy8JSd85OXShGuN85kl2LOW1Lj1mZukoqo61H62yjBgAiAGL8cR8z1q8rpiEvOA+U+uExR4OTxobz6ore3UYCsGGw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":4410},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 64/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.6_1775175960627_0.18521015103490335","host":"s3://npm-registry-packages-npm-production"}},"1.0.7":{"name":"@cyberhub/trust-axios","version":"1.0.7","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.7","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"927f2372c0e1cebd106e60c1429195b7d5d12a95","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.7.tgz","fileCount":2,"integrity":"sha512-77WH9bsRHRVtZdg7fqK22R5b/5ZALRnnjeTuRc44+zhACzcv7Y/c/Kb0kYb5yKalH/AeoMFclKZlZiPMfZgeKw==","signatures":[{"sig":"MEUCIQCorU4kAMVmBVm2yVT4XgHB7DU9/RXy7IHW2aXyHQRA6gIgMEvaDJ8wF/Fro1N2ijq4ne8MUfdQ11Y/pcczLILDzAU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":4371},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 64/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.7_1775176073736_0.9045757507643253","host":"s3://npm-registry-packages-npm-production"}},"1.0.8":{"name":"@cyberhub/trust-axios","version":"1.0.8","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2023-45857","CVE-2024-28849","got","node-fetch","undici","standard"],"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","_id":"@cyberhub/trust-axios@1.0.8","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"homepage":"https://nrupak.com/trust/axios","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"dist":{"shasum":"e42df95acb3c02520692fac835fdd38e3d11eb64","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.8.tgz","fileCount":2,"integrity":"sha512-dXMFTmm/O/4iXsLCDWrmgArY/XffUQY6CTh53qzWB2kYZaCiFI3KBfUjjFe0l4ZIJnKpYYIdJB620bMHjy5R7Q==","signatures":[{"sig":"MEYCIQDbhY2BVmU/lKrILtv60wMXMhfYqNvhkU4qlcfRh7ESAQIhAPuanovXagIEK6PlblhAXK3iqa402Mpvr3lEUMaKVYGw","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":4410},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"repository":{"url":"git+https://github.com/nrupaks/pkgtrust.git","type":"git"},"_npmVersion":"10.8.2","description":"Security Trust Report: axios@1.14.0 — 64/100 (C+, standard). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.","directories":{},"_nodeVersion":"20.20.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/trust-axios_1.0.8_1775176321121_0.8164551222474128","host":"s3://npm-registry-packages-npm-production"}},"1.0.9":{"name":"@cyberhub/trust-axios","version":"1.0.9","description":"Security Trust Report: axios@1.14.0 — 65/100 (B, standard). 8 vulnerabilities found. Maintainer risk, supply chain analysis from 8 security databases.","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2026-25639","GHSA-43fc-jf86-j433","CVE-2025-58754","GHSA-4hjh-wcwx-xvwj","CVE-2025-27152","got"],"license":"MIT","author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"repository":{"type":"git","url":"git+https://github.com/nrupaks/pkgtrust.git"},"homepage":"https://nrupak.com/trust/axios","_id":"@cyberhub/trust-axios@1.0.9","bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"_nodeVersion":"20.20.1","_npmVersion":"10.8.2","dist":{"integrity":"sha512-TCrJoc7ci/iFUVUEyQeiSac6XbmRqPPcIM02CYX7TzuLX4rQANsTm3RCAgmsYV2PCxZsQqFc2iG0paJBrx1jng==","shasum":"fd8711228edd42a5aefc66c7ba694956fef1b1b6","tarball":"https://registry.npmjs.org/@cyberhub/trust-axios/-/trust-axios-1.0.9.tgz","fileCount":2,"unpackedSize":4888,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIEwoyaE5duFUpcciPCBNmtW0VwDkITMYABVxBx4wiIlFAiACPuEhb8/Zhgm1jsZ1YeO194lR1QwDqdqRYIl7eVRsVA=="}]},"_npmUser":{"name":"nrupaks","email":"nrupaks@gmail.com"},"directories":{},"maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/trust-axios_1.0.9_1775642077227_0.03959598448639379"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-02T07:40:15.480Z","modified":"2026-04-08T09:54:37.475Z","1.0.0":"2026-04-02T07:40:15.745Z","1.0.1":"2026-04-02T08:13:46.255Z","1.0.2":"2026-04-02T08:31:27.977Z","1.0.3":"2026-04-02T18:53:35.880Z","1.0.4":"2026-04-03T00:14:34.081Z","1.0.5":"2026-04-03T00:24:14.635Z","1.0.6":"2026-04-03T00:26:00.794Z","1.0.7":"2026-04-03T00:27:53.877Z","1.0.8":"2026-04-03T00:32:01.296Z","1.0.9":"2026-04-08T09:54:37.361Z"},"bugs":{"url":"https://github.com/nrupaks/pkgtrust/issues"},"author":{"name":"Nrupak Shah","email":"nrupaks@gmail.com"},"license":"MIT","homepage":"https://nrupak.com/trust/axios","keywords":["axios","axios","security","security-report","trust-score","vulnerability","npm-audit","npm-security","supply-chain","pkgtrust","audit","scan","risk","risk-assessment","CVE-2026-25639","GHSA-43fc-jf86-j433","CVE-2025-58754","GHSA-4hjh-wcwx-xvwj","CVE-2025-27152","got"],"repository":{"type":"git","url":"git+https://github.com/nrupaks/pkgtrust.git"},"description":"Security Trust Report: axios@1.14.0 — 65/100 (B, standard). 8 vulnerabilities found. Maintainer risk, supply chain analysis from 8 security databases.","maintainers":[{"name":"nrupaks","email":"nrupaks@gmail.com"}],"readme":"# Security Trust Report: axios\n\n**[axios@1.14.0](https://www.npmjs.com/package/axios): 65/100 | Grade: B | Tier: STANDARD** (confidence: ±3)\n\n> Scanned on 2026-04-08 from 8 security databases. [View package on npm →](https://www.npmjs.com/package/axios)\n\n## TL;DR\n\n- **8 vulnerabilities found** (0 critical, 6 high)\n- Consider switching to **got** (No known breaches, better error handling)\n- Pin your version and monitor for changes\n\n## ⚠️ Security Incident Background\n\nCVE-2023-45857: CSRF token theft via cookie exposure. CVE-2024-28849: SSRF vulnerability via follow-redirects dependency allowing proxy-authorization header leak. The North Korea-linked Lazarus Group targeted axios in typosquatting campaigns.\n\n## Score Breakdown\n\n```\nMaintainer Trust:  ████████████████░░░░ 80/100\nPackage Health:    ███████████████████░ 93/100\nSupply Chain:      ░░░░░░░░░░░░░░░░░░░░ 0/100\nCommunity:         ███████████████████░ 93/100\n```\n\n### Why this score?\n\n- Supply Chain is 0 because: 8 known CVEs, in breach database, risky dependencies\n\n## Vulnerabilities (8 vulnerabilities)\n\n| Severity | Count |\n|----------|-------|\n| 🟠 High | 6 |\n| 🟡 Medium | 2 |\n\n- [CVE-2026-25639](https://nvd.nist.gov/vuln/detail/CVE-2026-25639)\n- [GHSA-43fc-jf86-j433](https://github.com/advisories/GHSA-43fc-jf86-j433)\n- [CVE-2025-58754](https://nvd.nist.gov/vuln/detail/CVE-2025-58754)\n- [GHSA-4hjh-wcwx-xvwj](https://github.com/advisories/GHSA-4hjh-wcwx-xvwj)\n- [CVE-2025-27152](https://nvd.nist.gov/vuln/detail/CVE-2025-27152)\n- [GHSA-jr5f-v2jv-69x6](https://github.com/advisories/GHSA-jr5f-v2jv-69x6)\n- [CVE-2024-39338](https://nvd.nist.gov/vuln/detail/CVE-2024-39338)\n- [GHSA-8hc4-vh64-cxmj](https://github.com/advisories/GHSA-8hc4-vh64-cxmj)\n\n## Key Risk Flags\n\n- 🔴 **CRITICAL**: RECENT-ISH BREACH: CSRF token theft CVE-2023-45857, SSRF via follow-redirects dependency CVE-2024-28849 (2023-2024) ([evidence](https://nvd.nist.gov/vuln/detail/CVE-2023-45857))\n- 🟠 **HIGH**: 6 HIGH vulnerabilities detected\n- 🟠 **HIGH**: 1 direct dependencies have known security issues\n\n## 🛠️ What Should You Do?\n\n**Immediate:**\n- Upgrade to the latest version (`npm update axios`)\n- Or replace with [got](https://nrupak.com/trust/got)\n\n**Always:** Pin version, run `pkgtrust scan` in CI, monitor at [nrupak.com/trust/axios](https://nrupak.com/trust/axios)\n\n## 🔄 Safer Alternatives\n\n| Package | Why | npm | Trust Score |\n|---------|-----|-----|-------------|\n| **got** | No known breaches, better error handling | [npm](https://www.npmjs.com/package/got) | [View score](https://nrupak.com/trust/got) |\n| **node-fetch** | Lightweight, fewer dependencies | [npm](https://www.npmjs.com/package/node-fetch) | [View score](https://nrupak.com/trust/node-fetch) |\n| **undici** | Node.js built-in HTTP client (Node 18+) | [npm](https://www.npmjs.com/package/undici) | [View score](https://nrupak.com/trust/undici) |\n\n## Maintainers (1)\n\n- [jasonsaayman](https://www.npmjs.com/~jasonsaayman) ✅ 2FA (org email) — [Trust profile](https://nrupak.com/trust/maintainer/jasonsaayman)\n\n**Methodology:** 18+ signals across 4 categories (Maintainer 35%, Package 25%, Supply Chain 25%, Community 15%). [Full scoring docs →](https://nrupak.com/trust)\n\n**Check your project:** `npm i -g @cyberhub/pkgtrust && pkgtrust scan axios` — [CLI docs](https://npmjs.com/package/@cyberhub/pkgtrust)\n**Data Sources:** GitHub Advisories · OSV.dev · npm audit · Snyk · Socket.dev · npms.io · Bundlephobia · deps.dev · CISA KEV · Packagephobia · OpenSSF Scorecard · Ecosyste.ms · GitHub Enhanced · Keybase · npm Provenance\n\n---\n\n*Report by [pkgtrust](https://nrupak.com/trust/axios) · [Dashboard](https://nrupak.com/trust) · [Compare](https://nrupak.com/trust/compare) · [CLI](https://npmjs.com/package/@cyberhub/pkgtrust)*\n\n*This is an automated security report. Not affiliated with the axios team. Updated 2026-04-08.*","readmeFilename":"README.md"}