Back to article
Microsoft Security Blog

From package to postinstall payload: Inside the Mastra npm supply chain compromise (opens in new tab)

Covered by 8 sources See all sources covering this story including BleepingComputer, This Week In 4n6

Covered in 9 articles

BleepingComputer·

Microsoft links Mastra AI supply chain attack to North Korean hackers

Feeds
This Week In 4n6·

Week 25 – 2026

Feeds
SecurityWeek·

North Korean Hackers Blamed for Mastra NPM Supply Chain Attack

Feeds
Malware Analysis, News and Indicators·

From package to postinstall payload: Inside the Mastra npm supply chain compromise

Feeds
Infosecurity Magazine·

Microsoft Attributes Mastra AI Supply Chain Attack to North Korea

Feeds
BadCyber·

IT Security Weekend Catch Up – June 19, 2026

Feeds
news.risky.biz·

Risky Bulletin: Klue breach impacts security firms

Feeds
news.risky.biz·

Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices

Feeds

In other languages

Nyheter·

Microsoft pekar ut nordkoreanska hackare i ny rapport

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help