Over 140 popular Mastra npm Packages Hit by Supply Chain Attack (opens in new tab)

Covered by 3 sources including This Week In 4n6, SecurityWeek

141 Mastra npm packages were compromised in a supply chain attack that injected a malicious dependency to silently download and execute a payload at install time. Category: Vulnerabilities & Threats

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

This Week In 4n6·

Week 25 – 2026

SecurityWeek·

North Korean Hackers Blamed for Mastra NPM Supply Chain Attack

news.risky.biz·

Covered in 3 articles

Week 25 – 2026

North Korean Hackers Blamed for Mastra NPM Supply Chain Attack

Risky Bulletin: Canada’s spy agency allowed to remove a botnet from Canadian devices