# Chrome

Mastra npm packages compromised in 'easy-day-js' supply chain attack App Security

By exploiting npm’s install-time script execution, attackers gained the ability to harvest browser data from Chrome, Edge, and Brave, extract credentials...