Inside the Axios supply chain compromise - one RAT to rule them all

A threat actor compromised the widely used axios npm package, covertly delivering a sophisticated, cross-platform Remote Access Trojan to millions of potential victims via a malicious dependency, highlighting the massive risk and reach of supply chain attacks in the JavaScript ecosystem.