145 Mastra npm Packages Compromised via Hijacked Contributor Account

Summary: A single npm account, "ehindero" - a legitimate former Mastra contributor whose scope access was never revoked - mass-published more than 140 malicious packages across the @mastra/* scope in an 88-minute automated campaign on 2026-06-17. The packages carried no malicious code themselves; each listed a third-party dependency called "easy-day-js," a clone of the dayjs date library whose postinstall hook drops a cross-platform cryptocurrency-stealing trojan that harvests data from over 160 wallet browser extensions and self-deletes.
What's compelling: The affected packages include @mastra/core, which sees more than 918K weekly npm downloads, and the payload runs at install time - so workstations and CI runners were exposed before anyone imported the package. Mastra generated SLSA provenance on its CI publishes but did not require it, meaning a standard npm token could publish without attestations; a signature-verifying install would have rejected every package in this wave.

Read the original at The Hacker News ↗

Topics: Supply Chain & AppSec
Related: Kitesurf is now open source Cyber Risks · Nov 13, 2026
Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026
ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026