Mastra Headlines

Phronews

North Korean hackers compromised 144 Mastra packages in an 88-minute automated campaign targeting AI developers, stealing credentials and crypto wallets.

Companies:Mastra

Cybernoz

Microsoft attributes the Mastra npm supply chain attack to North Korean state-sponsored group Sapphire Sleet, confirming compromise of over 140 packages.

Companies:Mastra

UnderCode News

An analysis of the Mastra supply chain breach attributed to North Korean hackers, discussing how they exploited open-source trust to deliver malware targeting cryptocurrency wallets.

Companies:Mastra

IBTimes SG

Microsoft confirms that North Korean hacking group Sapphire Sleet was behind the Mastra AI supply chain attack affecting over 140 npm packages.

Companies:Mastra

BleepingComputer

Microsoft attributes the Mastra AI supply chain attack compromising over 140 npm packages to North Korean hacker group Sapphire Sleet, who deployed malware targeting cryptocurrency wallets.

Companies:Mastra

Leitwacht

Leitwacht discusses the Mastra npm compromise and demonstrates how default-deny egress policies can block the attack, even without prior knowledge of the malicious package.

Companies:Mastra

Daily Security Review

Daily Security Review covers the Mastra npm supply chain attack, detailing how a dormant contributor account was hijacked to backdoor 141 packages, exposing millions of downloads.

Companies:Mastra

InfoSec Today

Socket contributed to the discovery of a supply chain attack compromising 144 Mastra npm packages via the easy-day-js typosquatting dependency.

Companies:MastraSocket

GovInfoSecurity

Hackers poisoned Mastra AI framework npm packages in a supply-chain attack, compromising over 140 packages with a malicious dependency that steals credentials and crypto wallets.

Companies:SemgrepMastra

Cyber Press

Hackers compromised over 140 Mastra npm packages using a typosquatted dependency to deploy a cross-platform infostealer targeting cryptocurrency wallets and credentials.

Companies:Mastra

SecNews

SecNews covers the supply chain attack on Mastra npm packages, describing how an old contributor account was used to distribute malicious code via easy-day-js.

Companies:Mastra

HEAL Security

HEAL Security reports on the compromise of 144 Mastra npm packages via a hijacked contributor account, citing findings from multiple security firms.

Companies:Mastra

SC Media

SC Media reports on the easy-day-js supply chain attack that compromised up to 144 Mastra npm packages, with malicious code delivered via a hijacked contributor account.

Companies:Mastra

StepSecurity

An attacker compromised the @mastra npm organization and added malicious dependency easy-day-js to 140+ packages, deploying a cross-platform cryptocurrency stealer.

Companies:Mastra

Snyk

Snyk analyzes the Mastra npm scope takeover, detailing how a former contributor's account was hijacked to inject malicious dependencies into 142 packages.

Companies:Mastra

Endor Labs

Endor Labs reports on the Mastra npm org compromise, where an attacker trojanized over 140 packages to deliver a remote payload via a typosquatted dependency.

Companies:Mastra

DEV Community

A Mastra Agent Ambassador shares lessons on building production agents, advocating for separating reasoning, IO, and orchestration layers.

Companies:Mastra

DEV Community

A developer rebuilds a multi-agent blog workflow using Mastra, emphasizing fail-loud patterns and human review gates.

Companies:Mastra

Digg

Mastra launched an agent builder for engineer-led teams, allowing developers to define tools and guardrails in code while others use a chat-based builder.

Companies:Mastra

Developers Digest

Article discusses using CopilotKit as a UI layer for agents, with Mastra as a recommended backend framework for TypeScript teams.

Companies:CopilotKitMastra

Scalekit

Tutorial on integrating Mastra's tool calling with Scalekit for connector identity and credential management.

Companies:Mastra

Composio Blog

Step-by-step guide to integrating Securitytrails with Mastra AI using Composio's Tool Router and MCP.

Companies:Mastra

DEV Community

A detailed analysis of Mastra's migration from .network() to Supervisor pattern, highlighting five engineering challenges.

Companies:Mastra

Pickaxe Blog

Compares top AI agent frameworks, highlighting Mastra as a TypeScript-first option with model router and built-in evals.

Companies:Mastra

StartupHub.ai

Ranks top AI agent frameworks in 2026, describing Mastra as a TypeScript-native framework for teams in the Node ecosystem.

Companies:Mastra