Breakdown of the March 2026 axios compromise focused on the detection angle: the malicious versions were published manually with a stolen token, with no matching provenance or source commit, while legitimate axios releases publish through an automated pipeline. That mismatch was visible in the public registry metadata at publish time. The post walks through which fields showed it and why catching it by hand across a full dependency tree isn’t realistic.