const mask = (str, maskChar = "#") => str.slice(-4).padStart(str.length, maskChar);

mask("123456789"); // "#####6789"