#8
SecurityWeek
general
June 22, 2026 at 11:10 UTC
North Korean Hackers Blamed for Mastra NPM Supply Chain Attack
By Ionut Arghire
AI Summary
North Korean threat actors have been attributed to a supply chain attack on the Mastra framework's NPM ecosystem, injecting a malicious dependency into over 140 Mastra packages that fetches a payload specifically targeting cryptocurrency browser extensions. The campaign continues the pattern of DPRK-linked groups using open-source package ecosystems to compromise developer environments and steal cryptocurrency assets. Developers using Mastra packages should audit their dependency trees and check for the malicious dependency introduced by the attackers.
Relevance score: 77.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →