npm, March 31: RAT in Axios and Half a Million Lines of Claude Code on GitHub

I wake up in the morning, open my feed — and right away, two incidents. Both about npm. Both serious....