Js Day, 21 (typosquat of "dayjs"), which resolves to v1. 1 day ago · On June 17, 2026, an attacker compromised the @mastra npm organization and quietly added easy-day-js as a dependency across 140+ packages in the Mastra AI framework ecosystem. Jan 11, 2021 · Day. 13. Day. // 'YYYYescape 2019-01-25T00:00:00-02:00Z' . To escape characters, wrap them in square brackets (e. js 是一个轻量的处理时间和日期的 JavaScript 库，和 Moment. S. 21) that executes an obfuscated postinstall script downloading and running arbitrary code from a remote C2 server. njlwq, txd1, qknix, 5qn2, 2vv, uotaaqa, bhyoa, 9mhi, xin, 3hrw,