LinkedIn calls it a smear campaign, but does not deny scanning people's browsers for extensions.
Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.