Mastra NPM - Temp Folder 24-Hex File Deletion

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•1

Detects node.exe deleting a 24-character hexadecimal JavaScript file from the Temp directory after execution, which is indicative of the Mastra NPM supply chain attack.