axis-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship.

dspy is a DSPy

Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via the PythonInterpreter class. An attacker can access arbitrary files by executing untrusted code within the sandbox.

com.liferay:com.liferay.dynamic.data.mapping.item.selector.web is a Liferay Dynamic Data Mapping Item Selector Web

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the select structure page when processing user input in the First Name, Middle Name, or Last Name fields. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting specially crafted payloads to these fields.