Axios npm supply chain attack: Malicious updates add remote access trojan
www.scworld.com
The axios npm package, with about 100 million weekly downloads, was compromised via a maintainer’s account.