Axios가 NPM에서 손상됨 - 악성 버전이 원격 액세스 트로이목마를 유포함

Supply chain woes continue

> Both versions were published using the compromised npm credentials of a lead axios maintainer, bypassing the project's normal GitHub Actions CI/CD pipeline. Doesn’t npm mandate 2FA as of some time last year? How was that bypassed?