AI synthesis Microsoft attributes a Mastra AI supply chain attack compromising 140+ npm packages to North Korean group Sapphire Sleet, with malware targeting cryptocurrency extensions.
What changed
Every report remains linked to its original publisher.
Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. [...]
A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions. The post North Korean Hackers Blamed for Mastra NPM Supply Chain Attack appeared first on SecurityWeek.