Node.js Suspicious Setup Script Execution

Ibrahim Saud@tektrix

•updated Jun 19, 2026•7•0•26

Detects Node.js executing the malicious setup.cjs script or easy-day-js with the --no-warnings flag, associated with the Mastra npm supply chain compromise.