Tag
#axios
2 posts
-
Egress allowlisting for coding agents and CI runners: the control that would have stopped the axios callback
Most agent-ecosystem malware has to phone home. An outbound allowlist on CI runners and agent sandboxes contains compromises that known-bad lists miss. Start in audit mode, then block. The ongoing cost is keeping the list current.
-
The axios compromise from an agent operator's seat: which controls would have fired, and when
Replaying the 31 March 2026 axios timeline against seven controls: a release-age delay and install-script blocking covered the whole window, a provenance check caught one of two versions, and advisories came at removal.
