221c45a790dec2a296af57969e1165a16f8f49733aeab64c0bbd768d9943badf

• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope

  A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope A dormant contributor account was used to republish the entire @mastra npm scope, each injected with a single dependency, easy-day-js, that drops a cross-platform cryptocurrency stealer. Here is how

• From package to postinstall payload: Inside the Mastra npm supply chain compromise

  From package to postinstall payload: Inside the Mastra npm supply chain compromise A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable thr

All reports →

• Connector · otx2
• Connector · intel_report_ingest2