A recently discovered Remote Access Trojan in the widely used Axios library puts millions of JavaScript developers at risk.