Two malicious versions of axios have been published on npm, exploiting compromised credentials and targeting multiple operating systems.