Over 140 Mastra NPM Packages Compromised In Supply Chain Attack Using Cryptocurrency Stealing Malware
Researchers have uncovered a supply chain attack targeting the Mastra npm ecosystem, where more than 140 packages were compromised through a hijacked contributor account and a malicious dependency designed to steal cryptocurrency wallet data and sensitive credentials.