axios Compromised on npm - Malicious Versions Drop Remote Access Trojan

A hijacked maintainer account was used to publish two malicious axios releases to npm, each silently dropping a cross-platform remote access trojan via a stealth dependency and advanced anti-forensics, marking one of the most sophisticated supply chain attacks ever observed against a top JavaScript package.