indicatorsha256
b122a9873bedf145ae2a7fd024b5f309007dbb025149f4dc4ac3f7e4f32a36a4
- First seen
- 2026-06-17
- Last seen
- 2026-06-20
- Sightings
- 2
Posts referencing this indicator
- From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
setup.cjs (malicious postinstall dropper)
- 140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack
Hash of the easy-day-js setup.cjs stage-1 loader.
