Axios npm hack used fake Teams error fix to hijack maintainer account

An Axios maintainer account was compromised in a targeted social engineering campaign and used to publish two malicious Axios versions, 1.14.1 and 0.30.4, to the npm registry. The releases added the plain-crypto-js dependency, which installed a remote access trojan on macOS, Windows, and Linux systems.