Someone Hid a Spy Program Inside a Package You Probably Use Every Day

Breaking down the Python RAT dropped by the Axios npm supply chain attack — what it does, how it hides, and how to get rid of it.