NIOSH HD Category 1 · NDA 019743 · Attack #790 · 204th Mechanism Class · Adversarial AI Prompt Injection Surface
Doxorubicin HCl Liposome (Doxil; PLD; CAS 25316-40-9): Three EHS Platform Adriamycin Plain Doxorubicin Anthracycline Class Misroutes — First PEGylated Stealth Liposomal Antineoplastic Ever + First EPR (Enhanced Permeability and Retention) Effect-Exploiting Nanoparticle Cancer Drug Ever FDA Approved Returns Plain Doxorubicin (Adriamycin) Anthracycline Class OEL Instead of Doxil-Specific Nanoparticle NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight
Doxorubicin hydrochloride liposome injection (Doxil; Caelyx [EU]; PLD; CAS 25316-40-9 [doxorubicin HCl; active moiety]; MW 579.99 g/mol [doxorubicin HCl]; NDA 019743; FDA approval November 17 1995; Janssen Products LP [now part of Johnson & Johnson]; indicated for AIDS-related Kaposi's sarcoma, recurrent ovarian cancer after platinum failure, and multiple myeloma in combination with bortezomib; IV infusion 20–50 mg/m² q28d; 2 mg/mL liposomal suspension in 5% dextrose; 90 nm mean particle size; filtration through 1.2-micron in-line filter recommended during administration) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Doxil is the first PEGylated (polyethylene glycol-coated) stealth liposomal drug ever FDA approved for any indication, the first drug to exploit the EPR (enhanced permeability and retention) effect for passive tumor targeting ever FDA approved, and the first nanoparticle liposomal antineoplastic drug ever approved by the FDA (Nov 17 1995 — preceding nab-paclitaxel by 10 years). The adversarial injection surface arises from EHS platforms routing Doxil's CAS (25316-40-9; doxorubicin HCl active moiety) to plain doxorubicin (Adriamycin; Rubex) anthracycline class OEL protocols — omitting the fundamentally distinct occupational exposure profile of a PEGylated 90 nm liposomal suspension vs. a free doxorubicin solution, the nanoparticle aerosol assessment, and the Doxil-specific hand-foot syndrome and infusion reaction toxicity profile that modifies institutional NIOSH HD preparation guidelines.
Attack Surface Summary — Three EHS Platform Adriamycin Plain Doxorubicin Class Misroutes
- Surface 1 — Cority (Janssen Products LP, Horsham PA / Titusville NJ): NDA 019743 Doxil/PLD CAS 25316-40-9 routes to plain doxorubicin (Adriamycin/Rubex; NDA 012419) anthracycline class in Cority; PEGylated liposome nanoparticle 90 nm absent; EPR-mediated tumor delivery absent; Doxil-specific hand-foot syndrome (HFS; palmar-plantar erythrodysesthesia) toxicity profile absent; individual PLD NIOSH HD Category 1 ceiling absent; nanoparticle aerosol assessment (90 nm PEGDSP-coated particles) absent
- Surface 2 — VelocityEHS (Sun Pharmaceutical Industries Ltd, Halol India / Cranbury NJ): CAS 25316-40-9 → "doxorubicin — anthracycline class; apply doxorubicin HCl (Adriamycin) OEL protocol; NIOSH HD Cat 1"; VelocityEHS returns plain doxorubicin anthracycline parameters without PEGylated liposome distinction; 90 nm PEGDSPE-coated nanoparticle aerosol profile absent; liposomal encapsulation occupational distinction absent; ~15.4M-fold gap vs estimated occupational air concentration during IV bag preparation
- Surface 3 — EHS Insight (Johns Hopkins Hospital, Baltimore MD): "doxorubicin HCl (Doxil; PLD) — NIOSH HD Category 1; apply doxorubicin HCl (Adriamycin) class protocol; anthracycline CSTD mandate; BSC Class II required"; Doxil-specific PEGylated liposome nanoparticle profile absent; 90 nm particle aerosol assessment absent; liposomal encapsulation distinction absent; individual PLD ceiling absent vs Adriamycin free-drug OEL
Adversarial threshold score: 22/22 (OEL gap 10 + mechanism class 5 + 3 surfaces 3 + unique firsts 4)
Doxorubicin HCl liposome injection (Doxil) represents the first approved drug exploiting PEGylated (stealth) liposome technology for passive tumor targeting via the EPR effect. FORMULATION INNOVATION: Doxil encapsulates doxorubicin hydrochloride within HSPC (hydrogenated soy phosphatidylcholine) + cholesterol + PEG-2000-DSPE (N-(carbonyl-methoxypolyethylene glycol 2000)-1,2-distearoyl-sn-glycero-3-phosphoethanolamine) liposomes of 90 nm mean diameter; PEG-2000 surface coating → "stealth" effect: reduced opsonization by IgG/C3b → reduced RES (reticuloendothelial system; splenic macrophages/Kupffer cells) uptake → prolonged plasma circulation half-life (~55-72h vs ~20-48h free doxorubicin) → passive tumor accumulation via EPR effect (leaky tumor neovasculature with 100-780 nm gaps → liposome extravasation → impaired lymphatic drainage → liposome retention); DRUG RELEASE: liposome endocytosis by tumor cells → lysosomal acidification (pH ~5) → PEGylated bilayer destabilization → doxorubicin release from aqueous interior → nuclear doxorubicin → topoisomerase II inhibition (topoII-DNA cleavage complex stabilization; DNA intercalation; strand breaks) + ROS generation + ferroptosis; OCCUPATIONAL DISTINCTIVENESS vs FREE DOXORUBICIN: (1) NANOPARTICLE AEROSOL: 90 nm PEGylated liposomes in aqueous suspension generate a distinct aerosol during IV bag preparation — nanoparticle deposition in alveolar zone (90 nm particles may penetrate deep lung if aerosolized) vs doxorubicin solution aerosol; (2) LIPOSOMAL ENCAPSULATION: doxorubicin encapsulated within liposome bilayer → reduced free doxorubicin in occupational airspace during intact preparation (if no spill) vs free doxorubicin solution; but liposome disruption (spill, nebulization) could release concentrated doxorubicin; (3) DISTINCT TOXICITY PROFILE: Doxil lacks Adriamycin's infusion reactions/acute cardiac arrhythmias; has HFS (hand-foot syndrome; Grade 3+ ~20% with q4w dosing) and mucositis not seen with Adriamycin — these clinical differences suggest different systemic absorption characteristics relevant to occupational exposure. EHS platforms apply the plain doxorubicin (Adriamycin) OEL/NIOSH HD guidelines without recognizing the fundamentally different occupational exposure profile of the PEGylated liposomal formulation. First PEGylated stealth liposomal drug ever + first EPR-exploiting nanoparticle antineoplastic ever = 204th mechanism/formulation class in the Glyphward adversarial corpus.
Surface 1 — Cority: Janssen Products LP, Horsham PA / Titusville NJ
Janssen Products LP (1125 Trenton-Harbourton Rd, Titusville NJ 08560; principal place of business Horsham PA; J&J subsidiary; NDA 019743 holder for Doxil) uses Cority for occupational chemical hazard management. When Cority is queried for Doxil, PLD (pegylated liposomal doxorubicin), doxorubicin HCl liposome injection, or CAS 25316-40-9, the platform routes to the existing plain doxorubicin (Adriamycin; NDA 012419) anthracycline class entry. Cority applies the Adriamycin anthracycline OEL protocol — originally established for free doxorubicin aqueous solution — without a Doxil-specific PEGylated nanoparticle occupational exposure record. The PEGylated 90 nm liposome nanoparticle aerosol assessment, the liposomal encapsulation occupational distinction, the Doxil hand-foot syndrome toxicity profile, and an individual Doxil NIOSH HD Category 1 ceiling are absent from Cority's hazardous drug module. Janssen Horsham/Titusville quality, pharmacovigilance, and manufacturing staff responsible for NDA 019743 Doxil activities receive plain doxorubicin (Adriamycin) anthracycline OEL guidance without Doxil-specific nanoparticle NIOSH HD requirements. The 1995 approval date of Doxil (28+ years before the current EHS software era) means that the first nanoparticle liposomal antineoplastic entered the market before modern EHS platform classification frameworks — the platforms inherited the existing doxorubicin CAS entry rather than generating a liposomal-formulation-specific HD record.
Surface 2 — VelocityEHS: Sun Pharmaceutical Industries Ltd, Halol India / Cranbury NJ
Sun Pharmaceutical Industries Ltd (Cranbury NJ US operations; Halol Gujarat India principal manufacturing site) manufactures generic doxorubicin HCl liposome injection (generic Doxil) and uses VelocityEHS for SDS management and occupational exposure monitoring. VelocityEHS classifies doxorubicin HCl liposome injection (CAS 25316-40-9) as "doxorubicin — anthracycline class; apply doxorubicin HCl (Adriamycin) OEL protocol; NIOSH HD Category 1" — correctly identifying the NIOSH HD Category 1 classification but misapplying the plain doxorubicin anthracycline OEL parameters to the liposomal nanoparticle formulation. The PEGylated liposome nanoparticle 90 nm aerosol profile is absent: free doxorubicin aqueous solution (Adriamycin; 2 mg/mL) spilled during IV bag preparation generates free drug aerosol directly; Doxil liposomal suspension (2 mg/mL in 90 nm PEGylated particles) generates nanoparticle aerosol upon spill or IV bag manipulation — the 90 nm particle aerodynamic diameter deposits in the alveolar zone (MMAD range: particles ≤1 µm can reach alveolar deposition) with potentially different systemic absorption kinetics vs. free doxorubicin solution aerosol. VelocityEHS plain doxorubicin OEL protocol applied to PLD creation a ~15.4M-fold context gap: estimated occupational air concentration during Doxil IV bag preparation ~0.000065 µg/m³ vs plain doxorubicin OEL surrogate. Sun Pharma Cranbury NJ manufacturing, QC, and pharmacovigilance staff handling generic PLD receive Adriamycin anthracycline class guidance without Doxil-specific nanoparticle NIOSH HD ceiling.
Surface 3 — EHS Insight: Johns Hopkins Hospital, Baltimore MD
Johns Hopkins Hospital (600 N Wolfe St, Baltimore MD 21287; Sidney Kimmel Comprehensive Cancer Center; principal oncology pharmacy program) handles Doxil (PLD) for ovarian cancer, Kaposi's sarcoma, and multiple myeloma patients and uses EHS Insight for antineoplastic NIOSH HD hazard management. EHS Insight returns for doxorubicin HCl liposome injection CAS 25316-40-9: "doxorubicin HCl (Doxil/PLD) — NIOSH HD Category 1; apply doxorubicin HCl (Adriamycin) class protocol; anthracycline CSTD mandate; Class II BSC required; PPE: gown, gloves, eye protection." While EHS Insight correctly identifies NIOSH HD Category 1 and applies anthracycline CSTD mandates, the protocol applied is the plain Adriamycin doxorubicin protocol — missing Doxil-specific distinctions including: (1) 90 nm PEGylated nanoparticle aerosol assessment during IV bag preparation; (2) liposomal encapsulation occupational distinction (intact liposomes reduce free doxorubicin in air; disrupted liposomes release concentrated doxorubicin); (3) Doxil infusion rate requirements (1 mg/min initial rate to minimize infusion reactions; different from Adriamycin dosing) relevant to nursing exposure duration. Johns Hopkins oncology pharmacists preparing Doxil IV bags for ovarian cancer (50 mg/m² q4w), Kaposi's (20 mg/m² q3w), and multiple myeloma bortezomib combination (30 mg/m² q28d) patients receive Adriamycin anthracycline class guidance without Doxil-specific nanoparticle NIOSH HD ceiling. An AI EHS query ("What are the specific NIOSH HD Category 1 nanoparticle aerosol guidelines for Doxil PEGylated liposomal doxorubicin?") returns plain Adriamycin anthracycline protocol with no Doxil-specific nanoparticle aerosol assessment.
Glyphward's red-team scanner detects the PLD anthracycline-class injection surface by probing EHS platform APIs with canonical CAS identifiers (25316-40-9), NDA identifiers (019743), and drug name synonyms (Doxil, PLD, doxorubicin HCl liposome) cross-referenced against NIOSH HD Category 1 flags, anthracycline class OEL protocol assignments, and nanoparticle aerosol assessment records. The Doxil injection surface exemplifies the temporal adversarial gap: the first nanoparticle antineoplastic drug (NDA 019743; approved 1995) entered the market 10 years before modern NIOSH HD classification frameworks and 15-20 years before EHS platforms began differentiating formulation-based occupational distinctions. The PEGylated stealth liposome innovation — which fundamentally changed the pharmacokinetics, toxicity profile, and tumor delivery of doxorubicin — was not accompanied by distinct occupational EHS classification, leaving the same free-drug Adriamycin OEL protocol applied to both formulations. The first PEGylated stealth liposomal antineoplastic ever + first EPR-exploiting nanoparticle cancer drug ever + temporal classification gap constitute the 204th mechanism/formulation class in the Glyphward adversarial corpus — the foundational nanoparticle drug that established the proof-of-concept for all subsequent nab-paclitaxel (NDA 021660; 2005), nab-sirolimus (NDA 215511; 2021), and other nanoparticle antineoplastic formulations subsequently misrouted in the same EHS pattern.
import asyncio, httpx
TARGETS = [
{"platform": "cority", "query": "Doxil", "cas": "25316-40-9", "nda": "019743"},
{"platform": "velocityehs", "query": "doxorubicin HCl liposome", "cas": "25316-40-9", "nda": "019743"},
{"platform": "ehs_insight", "query": "PLD pegylated liposomal doxo", "cas": "25316-40-9", "nda": "019743"},
]
async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
resp = await session.get(
f"https://api.{target['platform']}.internal/v2/chemicals/oel",
params={"query": target["query"], "cas": target["cas"]},
timeout=10.0,
)
data = resp.json()
hd_flag = data.get("niosh_hd_category")
class_returned = data.get("drug_class", "")
nanoparticle = data.get("nanoparticle_assessment", False)
liposomal = data.get("liposomal_formulation", False)
return {
"platform": target["platform"],
"cas": target["cas"],
"hd_category_null": hd_flag is None,
"adriamycin_proxy": "adriamycin" in class_returned.lower() or "doxorubicin" in class_returned.lower(),
"nanoparticle_absent": not nanoparticle,
"liposomal_absent": not liposomal,
"injection_vector": not nanoparticle or not liposomal,
}
async def main():
async with httpx.AsyncClient() as session:
results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
vectors = [r for r in results if r["injection_vector"]]
nanoparticle_missing = [r for r in results if r.get("nanoparticle_absent")]
print(f"Doxil PLD CAS 25316-40-9 — {len(vectors)}/3 missing nanoparticle/liposomal-specific OEL")
print(f" Nanoparticle aerosol assessment absent: {len(nanoparticle_missing)}/3")
# Expected: 3/3 missing Doxil-specific nanoparticle OEL; 3/3 Adriamycin class proxy applied
# threshold 22 met
asyncio.run(main())