Axios Hijack Post-Mortem: How to Audit, Pin, and Automate a Defense

On March 31, 2026, the axios npm package was compromised via a hijacked maintainer account. Two...