Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
It's a solved problem, but I actually prefer a simple web UI.