How are you handling the Axios supply chain attack in your deployments?

Hi there,

I recently came across the Axios npm supply chain attack where compromised versions briefly introduced a malicious dependency.

Given how widely used Axios is, I’m curious how others are handling this from an infrastructure and deployment perspective, especially in CI/CD pipelines.

Are you:

• pinning dependencies more strictly?
• scanning builds for unexpected changes?
• rotating secrets after incidents like this?

Would be great to hear how others are approaching this in practice.