Is axelarjs-sdk malicious?
Yes. Protet confirmed 1 version of axelarjs-sdk as malicious
First confirmed on 2026-11-01.
Affected versions
| Version | Confirmed | Protet record |
|---|---|---|
| 1.0.1 | 2026-11-01 | PROTET-NPM-2026-136 |
What it does
Install script posts the hostname and user name of the installing machine to a Discord webhook
axelarjs-sdk 1.0.1 runs node preinstall.js as a preinstall script. The name resembles the Axelar network SDK (@axelar-network/axelarjs-sdk). The script sends an HTTPS POST to a Discord webhook (https://canary.discord.com/api/webhooks/1566232728179843243/<token>) with the message 'Run on <hostname> as <username> at <local time>' under the sender name 'PC Notifier', then writes a .preinstall-marker.json file into the package directory. The package exports no functionality of its own. axelarjs-sdk 1.0.1, sol-wallet-adapter 1.0.0 and cutekitten-test 1.0.1 ship the same script and the same webhook, and all three names were removed from the npm registry. Remove the package and treat machines that installed it as having disclosed their hostname, user name and network address to a third party.
Indicators
URLshttps://canary.discord.com/api/webhooks/1566232728179843243/
What to do if you installed it
- Remove the package from every project that uses it, directly or through another dependency.
- Pin a clean version if you need the package: one that is not listed above and that you have checked yourself, or replace the package. A version missing from this page is not cleared.
- Check your lockfiles (
package-lock.json,yarn.lock,pnpm-lock.yaml) for the affected versions, including as a transitive dependency, and in CI caches. - Rotate credentials that were reachable from any machine or build that installed it: npm and GitHub tokens, cloud keys, SSH keys, and secrets in environment variables or CI settings.
Status history
- 2026-11-01: 1.0.1 named by Protet Intel