This is a big deal. Already seeing evidence of this by way of OpenClaw installations.
https://opensourcemalware.com/blog/axios-compromised
https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
https://opensourcemalware.com/blog/axios-compromised
https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
2