Axios npm compromise attributed by Microsoft to Sapphire Sleet (mentioned in "Mastra npm Scope Takeover"; Mastra attribution not confirmed)

Snyk

Microsoft Threat Intelligence attributed that earlier campaign to the actor it tracks as Sapphire Sleet (BlueNoroff). Attribution for this incident specifically is not confirmed, and we will not speculate further here; the pattern is worth noting for defenders, not asserting as fact.