The Axios lead discovered how they were compromised.
TLDR; Microsoft Teams Meeting 💀

https://github.com/axios/axios/issues/10636#issuecomment-4180237789