🎯 Anti-forensics / self-deletion

The items that name it 2

• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeup2026-06-20

  loader deletes itself (fs.rmSync) after spawning stage 2 to limit forensic traces

• Supply Chain Compromise of axios npm Package
  writeup2026-03-31

  setup.js deletes itself, deletes package.json, and renames package.md to package.json to present a clean manifest stub