Mastra NPM - Dropper Marker Files Co-Creation

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•2

Detects the simultaneous creation of .pkg_history and .pkg_logs in a temporary directory, indicating the setup.cjs dropper associated with the Mastra NPM supply chain attack.