From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

2026-06-17 (Back to Inventory)

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

Author(s): Microsoft Defender Research Team
Organization: Microsoft

Open article directly Open article on Archive.org

2026-08-26 ⋅ Microsoft ⋅ Parasharan Raghavan, Sagar Patil, Suriyaraj Natarajan
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Lorem Ipsum

2026-06-03 ⋅ Microsoft ⋅ Microsoft
How Microsoft names threat actors
Wisteria Tsunami

2026-05-18 ⋅ Microsoft ⋅ Microsoft Defender Security Research Team
How Storm-2949 turned a compromised identity into a cloud-wide breach
Storm-2949

Propose Change From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

Related Articles

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet