https://snyk.io/blog/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/ seems to have been due to a compromised maintainer account. Was the compromised maintainer account itself due to https://snyk.io/articles/trivy-github-actions-supply-chain-compromise/, directly or indirectly?

Resolves early on concrete evidence/reporting, else resolves NO at market close.