15:03
2026-06-20
devclubhouse.com
ai-safety
North Korean Hackers Poison Mastra AI in npm Attack
North Korean threat actor Sapphire Sleet compromised the Mastra AI open-source framework on June 17, 2026, by hijacking a maintainer's npm credentials and poisoning 141 packages within 88 minutes. The…