sergey2016
Named by 2 kept items in this workspace.
Search every workspace for sergey2016. It matches the name as written, so it can find other things that share it.
The items that name it 2
npm user account (registered with sergey2016@tutamail.com) that published the clean bait package easy-day-js@1.11.21 and the malicious easy-day-js@1.11.22, and used compromised @mastra organization credentials to mass-publish 140+ backdoored packages
All threat actors in this workspace.