From package to postinstall payload: Inside the Mastra npm supply chain compromise 

From package to postinstall payload: Inside the Mastra npm supply chain compromise 

SecurityVendor
Yanac

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.
The post From package to postinstall payload: Inside the Mastra npm supply chain compromise appeared first on Microsoft Security Blog.Microsoft Security BlogRead More