New Blog: Mastra npm Scope Takeover: 141 Packages Drop a RAT
Edit Calendar Icon 17 Jun 2026
SafeDep Logo
url

https://23.254.164.92:8000/update/49890878

discovered 2026-06-17

Dropper stage-2 retrieval URL; returns the 12-byte-hex-named JS RAT loader only to Node default User-Agent.

Campaigns

Linked packages

Read the full analysis →