lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
https://23.254.164.92:8000/update/49890878
URL
First Seen: 2026-06-20
Last Seen: 2026-06-20
Share:
8
Related Reports
1
Related IOCs
Related Reports
2026-06-18
Tuxcare
Why the Mastra easy-day-js Attack Should Change How Teams Trust npm Packages
#Mastra
#NPM
#SupplyChain
#T1195
#T1195.001
#T1059.007
#T1105
2026-06-18
OSM
Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
#Mastra
#NPM
#SupplyChain
#Lazarus
#T1195.001
#T1555
#T1105
#T1059.007
2026-06-17
Step Security
Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
#Mastra
#NPM
#SupplyChain
#T1195
#T1195.001
2026-06-17
Jfrog
easy-day-js: Supply Chain Campaign Targets Mastra npm Packages
#Mastra
#NPM
#SupplyChain
#T1195
#T1195.001
#T1059.007
#T1105
#T1547
#T1027
#T1082
#T1057
#T1518
#T1552
2026-06-17
Socket
140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack
#Mastra
#NPM
#SupplyChain
#T1195
#T1059
#T1053
#T1105
#T1547
#T1005
2026-06-17
Safe Dep
Mastra npm Scope Takeover: 143 Packages Drop a RAT
#Mastra
#NPM
#SupplyChain
2026-06-17
Microsoft
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
#SapphireSleet
#Mastra
#NPM
#SupplyChain
#T1195.002
#T1059.007
#T1059.001
#T1105
#T1071.001
#T1547.001
#T1543.003
#T1055
#T1562.001
#T1027
2026-06-16
Snyk
A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
#Mastra
#NPM
#SupplyChain
#T1078
#T1195.002
#T1059.007
#T1053.005
« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.