Node.js Suspicious Setup Script Execution

nomit vyas@xoxo

•updated Jun 25, 2026•1•0•8

Detects Node.js executing the malicious setup.cjs script or easy-day-js with the --no-warnings flag, associated with the Mastra npm supply chain compromise.