more details: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
Most likely, a maintainer's GitHub and npm accounts are compromised as these issues are getting deleted.
I have also reported this as a vulnerability, so that a CVE can be generated.