JUST IN: The Axios library, one of the most widely used JavaScript tools for connecting applications to the internet, was compromised on npm for several hours to distribute malware.

Researchers and Google have linked the incident to a North Korean actor, in a new episode that exposes the potential reach of supply chain attacks.
Malicious versions of Axios were published on npm and removed about three hours after the incident was detected.