{
    "type": "bundle",
    "id": "bundle--8a671663-62a1-4657-aee8-fbfeb98d8caf",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--1cf9fd01-dd75-4e38-8a75-eb6f2ed4daf9",
            "created": "2026-09-07T00:00:46.914473Z",
            "modified": "2026-09-07T00:03:34.113645Z",
            "name": "KodemSecurity",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--743d6624-8ca7-489e-8b22-e88d1634ee27",
            "hashes": {
                "SHA-256": "b73de25c053c3225a077738a1fcbd9ca6966d7b3cd6f5494a30f0aa0eae55c7e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b8f8c564-78c3-40b3-a716-1a07669617cb",
            "hashes": {
                "MD5": "b13415f8c734e0d45aeca083ffcfe153",
                "SHA-1": "4727365754cc41e4ba5a483f328289fd09a54651",
                "SHA-256": "ae70dd4f6bc0d1c8c2848e4e6b51934626c4818dcb5af99d080ddbd7dc337185"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--be59e800-62da-4b1d-b9ab-3df91626cba8",
            "hashes": {
                "MD5": "f29630beb594dbf25e738165705bb4a5",
                "SHA-1": "52baf9cedd288b0d53a5caed3e103487d9412ab9",
                "SHA-256": "b122a9873bedf145ae2a7fd024b5f309007dbb025149f4dc4ac3f7e4f32a36a4"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b65a715f-2d52-4218-a4c2-c9cbadde923a",
            "value": "23.254.164.123"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8a8d00b1-00b9-4f71-ab55-b7bf3734edcf",
            "value": "23.254.164.92"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1c557bdf-379a-44dc-a0e1-d5ded122fb4e",
            "hashes": {
                "SHA-256": "4a8860240e4231c3a74c81949be655a28e096a7d72f38fbe84e5b37636b98417"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--43d934c8-1650-4b14-aa97-45a88a0cde4e",
            "hashes": {
                "MD5": "c18fd75526533dfc90e91e2fb80effaf",
                "SHA-1": "cd1129d1522a553d0365c433657cee39e4fae82d",
                "SHA-256": "221c45a790dec2a296af57969e1165a16f8f49733aeab64c0bbd768d9943badf"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ba013c36-9b6e-4b21-bd99-3c5f684f5845",
            "value": "https://23.254.164.92:8000/update/49890878"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--3ed6bf9d-3aa5-4265-9d35-8eabb0ff56ad",
            "created_by_ref": "identity--1cf9fd01-dd75-4e38-8a75-eb6f2ed4daf9",
            "created": "2026-09-07T02:04:41.97039Z",
            "modified": "2026-09-07T02:04:41.97039Z",
            "name": "Mastra npm Packages Compromised: The easy-day-js Typosquat, IOCs, and First-Hour Response",
            "published": "2026-06-17T00:00:00Z",
            "object_refs": [
                "identity--1cf9fd01-dd75-4e38-8a75-eb6f2ed4daf9",
                "file--743d6624-8ca7-489e-8b22-e88d1634ee27",
                "file--b8f8c564-78c3-40b3-a716-1a07669617cb",
                "file--be59e800-62da-4b1d-b9ab-3df91626cba8",
                "ipv4-addr--b65a715f-2d52-4218-a4c2-c9cbadde923a",
                "ipv4-addr--8a8d00b1-00b9-4f71-ab55-b7bf3734edcf",
                "file--1c557bdf-379a-44dc-a0e1-d5ded122fb4e",
                "file--43d934c8-1650-4b14-aa97-45a88a0cde4e",
                "url--ba013c36-9b6e-4b21-bd99-3c5f684f5845"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.kodemsecurity.com/resources/mastra-npm-packages-compromised-easy-day-js-supply-chain-attack-iocs-and-response-runbook"
                }
            ]
        }
    ]
}