144 Mastra npm Packages Compromised via Hijacked Contributor Account

Home / Tech / 144 Mastra npm Packages Compromised via Hijacked Contributor Account

144 Mastra npm Packages Compromised via Hijacked Contributor Account

June 17, 2026 dirk 0 Comments 3 tags

144 Mastra npm Packages Compromised via Hijacked Contributor Account

As many as 144 npm packages associated with the Mastra namespace (“@mastra/*”), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js, per findings from JFrog, SafeDep, Socket, and StepSecurity.

“A single npm account (ehindero) mass-published more

Source: The Hacker News

Explore More

Abandoned and Little-Known Airfields

Abandoned and Little-Known Airfields Source: Hacker News

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited

Stop Killing Games fails to secure EU law despite 1.3M signatures

Stop Killing Games fails to secure EU law despite 1.3M signatures Source: Hacker News