Microsoft Attributes Mastra AI Supply Chain Attack to North Korea

Microsoft attributes a large-scale npm supply-chain attack against the Mastra TypeScript project to North Korean state actor Sapphire Sleet; attackers hijacked a maintainer account to publish poisoned packages (via the malicious dependency easy-day-js) that disabled TLS verification, contacted C2 servers, and delivered cross-platform malware aimed at stealing cryptocurrency wallet data and collecting system reconnaissance. Microsoft recommends scanning dependency trees and node_modules for easy-day-js, pinning known-good package versions, and updating to unaffected Mastra releases.