Supply Chain Malware Alert: plain-crypto-js Compromises Axios Packages

A malicious npm package, plain-crypto-js, was stealthily embedded as a dependency in popular Axios releases, enabling cross-platform credential theft, remote code execution, and persistent attacker control over developer and CI/CD environments through highly obfuscated, automated malware.