Anatomy of the axios Supply Chain Attack (and How We Checked Our Machines in 10 Minutes)

A compromised npm maintainer account pushed malware into axios. Here's how the attack worked, what it installed, and how we checked our machines in 10 minutes.