{
    "type": "bundle",
    "id": "bundle--59b3a020-a01b-4d01-99e2-0c172d120a41",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--95ce306c-3358-4c28-95fd-5b28de5a530e",
            "created": "2026-04-01T03:56:46.477551Z",
            "modified": "2026-04-01T03:57:55.701527Z",
            "name": "Snyk",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43d934c8-1650-4b14-aa97-45a88a0cde4e",
            "hashes": {
                "MD5": "c18fd75526533dfc90e91e2fb80effaf",
                "SHA-1": "cd1129d1522a553d0365c433657cee39e4fae82d",
                "SHA-256": "221c45a790dec2a296af57969e1165a16f8f49733aeab64c0bbd768d9943badf"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--7c75adff-0e0b-4e6a-a851-69d3d66b3b7e",
            "value": "ehindero2016@tutamail.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ba013c36-9b6e-4b21-bd99-3c5f684f5845",
            "value": "https://23.254.164.92:8000/update/49890878"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b65a715f-2d52-4218-a4c2-c9cbadde923a",
            "value": "23.254.164.123"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8a8d00b1-00b9-4f71-ab55-b7bf3734edcf",
            "value": "23.254.164.92"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8ddc45b1-8736-4f2b-b23e-9ead62032bef",
            "created_by_ref": "identity--95ce306c-3358-4c28-95fd-5b28de5a530e",
            "created": "2026-06-24T21:04:16.46472Z",
            "modified": "2026-06-24T21:04:16.46472Z",
            "name": "A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope",
            "published": "2026-06-16T00:00:00Z",
            "object_refs": [
                "identity--95ce306c-3358-4c28-95fd-5b28de5a530e",
                "file--43d934c8-1650-4b14-aa97-45a88a0cde4e",
                "email-addr--7c75adff-0e0b-4e6a-a851-69d3d66b3b7e",
                "url--ba013c36-9b6e-4b21-bd99-3c5f684f5845",
                "ipv4-addr--b65a715f-2d52-4218-a4c2-c9cbadde923a",
                "ipv4-addr--8a8d00b1-00b9-4f71-ab55-b7bf3734edcf"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://snyk.io/blog/a-forgotten-contributor-account-compromised-the-entire-mastra-npm-package-scope/"
                }
            ]
        }
    ]
}