Sam Bhagwat, founder/CEO of Mastra and author of 'Principles of Building AI Agents,' argues that developer relations in the age of AI is about 'aura-maxxing'—creating unique, time-and-place-specific c…
In the first half of 2026, two autonomous AI agent campaigns compromised developer infrastructure: one exploited GitHub Actions workflows at Microsoft, DataDog, and CNCF projects, achieving remote cod…
An open-source coding agent called Relay has been released, supporting non-mainstream and Chinese LLM providers like DeepSeek, Qwen, and GLM. The Electron app offers chat and code workspaces with file…
A developer published a side-by-side comparison of 15 AI agent frameworks, filtering by use case (RAG, multi-agent, structured output) and language (Python, TypeScript, .NET), updated weekly. The comp…
Microsoft Threat Intelligence reported that North Korean state-sponsored actor Sapphire Sleet compromised over 140 packages in the @mastra npm scope, targeting developers building AI coding tools. The…
Arize AI released Project Rosetta Stone, a reference implementation that builds the same agent across 22+ frameworks with three observability tiers, enabling engineers to see exactly how to instrument…
A developer built `mastra-auth-kinde`, an open-source auth provider that integrates Kinde with the Mastra AI agent framework. The provider enables multi-tenant authentication, machine-to-machine commu…
In June 2026, attackers hijacked the npm contributor account 'ehindero' to mass-publish malicious versions of 144 packages under the @mastra namespace, in what security researchers from JFrog, SafeDep…
An attacker hijacked a dormant contributor account and published malicious versions of 144 packages under the @mastra npm scope between 01:15 and 02:36 UTC, targeting the TypeScript AI agent framework…
On June 17, 2026, an attacker compromised the @mastra npm organization and added the typosquat package easy-day-js as a dependency across 140+ Mastra AI framework packages, exposing over 1.1 million w…
A supply chain attack compromised over 140 npm packages in the @mastra scope, including @mastra/core with 918K weekly downloads, by injecting a malicious dependency that executes a postinstall script …
An attacker hijacked a Mastra maintainer's account and republished 116 packages in the @mastra catalog over 27 minutes, adding a hidden dependency on the typosquat package easy-day-js. The malicious p…
Developer Salim Assili is building AI CostGuard, a local-first TypeScript/Node.js runtime safety layer that blocks costly AI agent calls before they reach provider APIs. The tool addresses failure mod…
Agent frameworks like LangGraph, Google ADK, and Mastra advertise durable execution through checkpointing, but their state-snapshot approach only recovers to the last boundary, not the exact failing s…
SigNoz announced support for Mastra observability through OpenTelemetry, enabling developers to instrument AI applications and export traces for real-time monitoring of model performance, latency, err…
Mumbai-based software engineer Neha built CompliScore, a free 60-second compliance health scanner for Indian startups, in under eight hours. The tool generates a compliance score out of 100, lists pen…
ClickHouse's May 2026 newsletter highlights how Qonto replaced Grafana Tempo with ClickHouse Cloud, reducing high-cardinality trace metadata from 231 TB uncompressed to 376 GB on disk, and how LINE MA…