# Mastra

144 Mastra npm Packages Compromised via Hijacked Contributor Account App Security

"This makes the Mastra ecosystem an exceptionally high-value target for supply chain attackers." The "easy-day-js" package launches an obfuscated payload...