The most INSANE attack in JavaScript history?

The Axios JavaScript library, installed over 300 million times per week, was compromised in a supply chain attack. An attacker hijacked a lead maintainer's npm account, changed the email address, and published two malicious versions. Rather than injecting malicious code directly, the attacker added a dependency that ran a Show more