The axios Attack Was a Wake-Up Call. Your AI Agent Just Ran npm install Without Asking You.

The axios 1.14.1 supply chain attack hit packages with 100M+ weekly downloads. But here's what...