A prototype pollution vulnerability in the axios HTTP client library (npm) allows an attacker who can manipulate JavaScript object prototypes to redirect outbound HTTP/HTTPS requests through an attacker-controlled proxy, enabling full interception of traffic. Any Node.js application using axios for external API calls, authentication flows, or data retrieval may be exposing request payloads, session tokens, and credentials to an adversary. Affected version range: [pending OSV advisory confirmation]. Organizations using axios in production Node.js environments should treat this as high severity and apply the patched version identified in GHSA-35jp-ww65-95wh within 72 hours of verification.