Microsoft Threat Intelligence on Mythryl: “Microsoft attributes the Mastra npm supply chain compromise to…”

@threatintel.microsoft.com

Microsoft attributes the Mastra npm supply chain compromise to Sapphire Sleet, a North Korean actor that primarily targets the financial sector. Microsoft has observed use of known Sapphire Sleet infrastructure, malware, and tactics following compromise. msft.it/63320vmpSC

msft.itFrom package to postinstall payload: Inside the Mastra npm supply chain compromise | Microsoft Security BlogA poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.

19/6/26, 8:35 pm9 reposts7 likes

Post