Tag

mastra-npm-compromise

Safeguard articles tagged "mastra-npm-compromise" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

A forgotten contributor account compromised the Mastra npm scope

A dormant npm account with unrevoked publish rights let attackers trojanize 144 @mastra packages in 88 minutes, dropping a crypto-wallet RAT tied to Sapphire Sleet.

Jun 30, 20266 min read