npm install is not your friend either — The Axios Supply Chain Attack

Axios, one of the most downloaded npm packages in existence, got compromised. And the attack didn't live in the code you read — it lived in the install.