Axios (npm) was compromised, if you haven't already it is super important to check your lock files.
gist.github.com/joe-desimone...
gist.github.com
axios_compromise.md
GitHub Gist: instantly share code, notes, and snippets.