140+ Mastra npm Packages Compromised in Coordinated Supply Chain Attack (opens in new tab)

Covered by 3 sources including This Week In 4n6, thehackernews.com

More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

This Week In 4n6·

Week 25 – 2026

thehackernews.com·

144 Mastra npm Packages Compromised via Hijacked Contributor Account

news.risky.biz·

Covered in 3 articles

Week 25 – 2026

144 Mastra npm Packages Compromised via Hijacked Contributor Account

Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices