🔧 144 Mastra npm packages compromised in major software supply chain attack

Mastra npm Packages Compromised in easy-day-js Supply Chain Attack: What Developers Must Know

The Mastra npm packages compromise is one of the largest targeted software supply chain attacks seen in the JavaScript ecosystem to date. In June 2026, attackers exploited a hijacked npm contributor account — specifically ehindero — and mass-published...