indicatorurl
hxxps://teams[.]onweblive[.]org/api/update/8555575039/4
- First seen
- 2026-06-20
- Last seen
- 2026-06-20
- Sightings
- 1
Posts referencing this indicator
- From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
Post-compromise PowerShell backdoor download endpoint