Another massive supply chain attack today, this time it's axios on npm.
Earlier attacks were driven by github actions vulnerabilities, but what we're seeing now is the cascading effects of earlier compromises, and previously stolen credentials being leveraged.
It's become a contagion at this point