144 Mastra npm Packages Compromised via Hijacked Contributor Account

As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js, per findings from J

Related Stories

📰

North Korean Hackers Suspected in High-Profile Mastra AI Supply Chain Breach

WordPress Plugin Vulnerability Exposes API Keys to Devastating Hacker Attacks

📰

Icarus Hackers Unleash Chaos, Klue OAuth Breach Victim List Continues to Expand

📰

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain