Single low confidence YARA rule match 'post_to_hardcoded_http' in README.md. Insufficient evidence to classify as malware.
No verification record available.
The package axios version 1.13.5 has a YARA rule match 'post_to_hardcoded_http' in the README.md file. While this indicates a potential risk, it is only one piece of evidence and the confidence level is low. Without further corroborating evidence, it is not possible to classify this package as malware. It is possible that the matched string is part of a legitimate example or documentation within the README.