Nation-State Threats Expand to AI Agent Dependencies in npm Repositories

This article was originally published on LucidShark Blog. On June 17, 2026, Microsoft Threat Intelligence published a report attributing a supply chain attack on more than 140 packages in the @mastra npm scope to Sapphire Sleet, a North Korean state-sponsored threat actor. Mastra is a TypeScript fra

Related Stories

📰

Your Baby Monitor's Biggest Security Flaw Isn't Hackers. It's the Company That Built It.

TypeScript 5.7's `--module nodenext` Disrupts Legacy Express Applications

📰

OpenCode: a alternativa open source ao Claude Code (sem lock-in de modelo nem de nuvem)

📰

Sent 419 cold B2B emails: 41% opened, no clicks achieved.