Daring Fireball
• John Gruber
Axios, Super Popular NPM Package, Was Compromised in Attack on the Module’s Maintainer
stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
