How the axios@1.14.1 supply chain attack worked (and how to protect yourself)

On March 31, 2026, someone hijacked the npm account of axios's lead maintainer and published two...