The production frontend is running Axios 1.13.6 in the vendor bundle. This version is not affected by the compromised 1.14.1 / 0.30.4 npm supply chain attack, but it is only one minor version away. An upgrade at the wrong time on a developer machine could happened...