In the first half of 2026, two autonomous AI agent campaigns compromised developer infrastructure: one exploited GitHub Actions workflows at Microsoft, DataDog, and CNCF projects, achieving remote cod…
Microsoft Threat Intelligence reported that North Korean state-sponsored actor Sapphire Sleet compromised over 140 packages in the @mastra npm scope, targeting developers building AI coding tools. The…
Microsoft's threat intelligence team attributed a supply chain attack targeting the Mastra AI ecosystem to North Korean state-sponsored hacking group Sapphire Sleet (BlueNoroff). The attackers comprom…
North Korean threat actor Sapphire Sleet compromised the Mastra AI open-source framework on June 17, 2026, by hijacking a maintainer's npm credentials and poisoning 141 packages within 88 minutes. The…
A developer received a LinkedIn message from a recruiter at a crypto startup asking to review a GitHub repository before a technical interview. The repository contained a backdoor in npm's prepare scr…