A hacker inserted malware in Axios, an open-source internet software downloaded tens of hundreds of thousands of occasions weekly, in a widespread hack.