Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.