The axios Supply Chain Attack Just Proved Why Static Analysis Matters More Than Ever

On March 31, 2026, axios — one of npm's most downloaded HTTP client libraries — was hit by a supply...