An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Most likely, a maintainer's GitHub and npm accounts are compromised as these issues are getting deleted. I have also reported this as a vulnerability, so that a CVE can be generated.