There are now two supply chain attacks in a week. A few days ago it was litellm (Pypi) and now its axios (npm) .