Flutterby™! : axios supply chain attack social engineering

Simon Willison has a link to the axios npm supply chain compromise post-mortem, including Jayson Saayman's description of how the social engineering worked.

tl;dr: extremely real looking contact with a company that eventually ended up as a Microsoft Teams meeting, that complained that some component was out of date, update process on that component was the compromise.