Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256Signal 38/100
ae70dd4f6bc0d1c8c2848e4e6b51934626c4818dcb5af99d080ddbd7dc337185
Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Found in 1 report: From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
49%
Signal Score
38 / 100
IDS Rule
No
Threat Context
Malware Families2
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
1 report49% confidence
Microsoft Threat Intelligence
Jun 18, 2026
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
15 IOCs in report