A major supply chain malware attack has hit Axios, a popular internet coding tool used by millions, Socket Security reported. The malicious code was added to two versions of Axios, which were designed to execute during installation. "If you use Axios, pin your version immediately and audit your lockfiles. Don't upgrade," Socket Security Founder Feross Aboukhadijeh said.