144 Mastra npm packages compromised in software supply chain attack (opens in new tab)

Mastra npm Packages Compromised: Inside the easy-day-js Supply Chain Attack Impacting 144 Packages The compromise of 144 Mastra npm packages marks one of the largest and fastest supply chain attacks on JavaScript AI frameworks to date. Known as the “easy-day-js” incident, this breach exploited a single hijacked contributor account and triggered a chain reaction placing countless downstream projects at risk. When a trusted namespace loses control, the surface area is vast: AI developers, enter...