221c45a790dec2a296af57969e1165a16f8f49733aeab64c0bbd768d9943badf

Posts referencing this indicator

• From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

  Microsoft

  protocol.cjs (second-stage Node.js implant)

  2026-06-20
• 140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack

  Socket

  Hash of the stage-2 cross-platform stealer payload (protocal.cjs).

  2026-06-17