A specialized security diagnostic tool to identify and mitigate the 2026 axios supply-chain attack on local development environments.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install check-axios-malware
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install check-axios-malware using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Axios Malware Scanner?
The Axios Malware Scanner is a critical security utility within the Openclaw Skills ecosystem designed to detect the malicious axios supply-chain compromise of March 2026. This specific attack targeted developers by injecting a cross-platform backdoor through the plain-crypto-js dependency in axios versions 1.14.1 and 0.30.4.
This skill automates the detection of Indicators of Compromise (IOCs) across your file system, active processes, and network state. It is an essential tool for developers to verify the integrity of their local machines, especially those running OpenClaw 2026.3.28 which used the at-risk dependency chain. By leveraging this skill, users can quickly identify if their systems have been compromised by malicious postinstall scripts.
Axios Malware Scanner Use Cases
- Verifying system safety after an npm supply-chain attack alert.
- Checking for the presence of the malicious plain-crypto-js dependency in local node_modules.
- Auditing OpenClaw 2026.3.28 installations for potential security risks.
- Performing a quick security scan for suspicious background processes like unauthorized reverse shells or unexpected curl/wget activity.
How Axios Malware Scanner Works
- Scans high-risk system directories to locate the plain-crypto-js folder, which serves as the primary indicator of infection.
- Iterates through all package.json files in node_modules to flag axios versions 1.14.1 or 0.30.4 using a Python-based parser.
- Analyzes currently running processes for suspicious activity involving curl, wget, or netcat that may indicate an active backdoor.
- Monitors established network connections for unusual outbound traffic to unknown remote hosts.
- Reviews persistence mechanisms such as crontab entries and shell profile files for malicious script injections.
Axios Malware Scanner Setup
To use this tool within the Openclaw Skills framework, ensure your environment has the necessary system utilities installed.
# Verify required binaries are available on your path
which find ps ss python3 crontab
No additional configuration is needed as the skill uses standard system commands to perform its audit.
Axios Malware Scanner Data Schema & Taxonomy
The skill performs read-only operations to generate a security report. It organizes its findings based on the following taxonomy:
| Component | Description |
|---|---|
| IOC Discovery | Status of the plain-crypto-js directory presence |
| Version Audit | List of all axios versions found and their safety status |
| Process Analysis | PID and command strings of suspicious background tasks |
| Persistence Check | Content of crontab and the last 20 lines of shell rc files |
| Network State | List of established connections and associated PIDs |
Axios Malware Scanner Advanced Features
- Multi-directory recursive scanning for hidden node_modules instances.
- Python-integrated JSON metadata extraction for accurate version flagging.
- Comprehensive shell profile auditing to detect hidden malicious aliases or exports.
- Integrated incident response workflow for rapid remediation and daemon restarts.
SKILL.md
Loading
Related Openclaw Skills
Memory System
A comprehensive long-term memory framework for AI agents featuring Markdown-based storage, semantic search, and structured feedback loops.
Work Report Summary
A structured tool for persisting work logs in a local SQLite database to generate precise daily and weekly progress summaries.
Memory System
A sophisticated file-based memory architecture for AI agents that combines semantic search with categorized persistent storage for long-term context retention.
Memory System
A comprehensive memory architecture for AI agents featuring tiered storage, semantic vector search, and automated memory consolidation.
Creem Agent
An autonomous store operations manager that monitors SaaS health, manages failed payments, and handles churn winbacks for Creem.io merchants.
Harness Research
Harness Research is an automated intelligence engine that tracks, analyzes, and maps the latest AI agent research papers directly to your system's improvement goals.
METADATA
Featured*
