Well this sucks https://cybernews.com/security/axios-npm-critical-supply-chain-compromise/