indicatornpm_package
easy-day-js
- First seen
- 2026-06-17
- Last seen
- 2026-07-14
- Sightings
- 3
Posts referencing this indicator
- June 2026 Threat Trend Report on APT Groups
Malicious npm dependency injected by APT38 (Sapphire Sleet) into the Mastra npm supply chain, affecting 140+ npm packages
- From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
Malicious typosquat of dayjs injected into Mastra packages
- 140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack
Malicious typosquatted dependency injected into Mastra packages to deliver the initial loader.
