Compromised axios npm package delivers cross-platform RAT

A compromised maintainer account published malicious axios npm releases that silently installed a cross-platform remote access trojan via a trojanized dependency, exposing millions of applications to supply-chain attack before swift community response contained the threat.