The attack on the popular NPM package Axios is just one of many targeting maintainers and has shone a light on how threat actors can scale sophisticated social engineering campaigns.
Axios Attack Shows Social Complex Engineering Is Industrialized
Summary + source link. No paywalls, no tracking.