Browsing Tag
Supply Chain Attacks
2 posts
Attacks that compromise software dependencies, package ecosystems, build systems, or trusted update paths.
Mastra npm Compromise Turns AI Agent Frameworks Into a Supply-Chain Target
Attackers republished more than 140 Mastra npm packages with a poisoned easy-day-js dependency, exposing AI agent developers to an install-time remote payload. Teams that installed affected @mastra packages on June 17 should treat developer machines and CI runners as compromised.
The Arch AUR Malware Attack Is a Linux Supply Chain Warning
A June 2026 Arch User Repository compromise hit hundreds of community packages with credential-stealing Linux malware. Arch and Arch-based users should treat recent AUR builds as a security event, not a routine package cleanup.