Cybersecurity · 31 views
144 Mastra npm Packages Compromised via Hijacked Contributor Account
As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software…
Summary
As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js, per findings from JFrog, SafeDep, Socket, and StepSecurity.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- MikroTik Patches Critical Flaws Chained to Hack RoutersContinue reading
- Mathspace Data Breach Exposes Over 1 Million PeopleContinue reading
- Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web ShellContinue reading
- 220 million traveler records exposed in Vietnam-linked APIS leakContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow