Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The attackers swapped the account's email address for an anonymous ProtonMail inbox and pushed the infected packages manually ...