Back to article
stepsecurity.io

Mastra NPM Supply Chain Attack: 140 Packages Backdoor via easy-day-JS Typosquat (opens in new tab)

Covered by 5 sources See all sources covering this story including thehackernews.com, Malware Analysis, News and IndicatorsDiscussed on Hacker News

Covered in 5 articles

thehackernews.com·

144 Mastra npm Packages Compromised via Hijacked Contributor Account

Feeds
Malware Analysis, News and Indicators·

Easy-day-js Targets Mastra, Dependency Attacks Grow

Feeds
CTO at NCSC·

CTO at NCSC Summary: week ending June 21st

Discussed on Substack
Feeds
news.risky.biz·

Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices

Feeds

In other languages

何夕2077的个人站·

2026-06-18日刊

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help