Supply Chain Attack on Axios Pulls Malicious Dependency from npm

A sophisticated supply chain attack compromised popular Axios npm releases by surreptitiously introducing a malicious dependency, plain-crypto-js@4.2.1, which deployed a stealthy, cross-platform remote access trojan capable of exfiltration and command execution, highlighting critical gaps in publishing workflows and the cascading risks of transitive dependencies.