Executive Summary
North Korean hackers are blamed for adding a malicious dependency to 140+ packages of Mastra, a TypeScript AI agent framework, to target crypto extensions.
What Happened
A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions. The post North Korean Hackers Blamed for Mastra NPM Supply Chain Attack appeared first on SecurityWeek .
Affected Products
- Mastra
- npm
Vulnerability / Attack Technique
AI agent framework supply chain attack
Technical Mechanism
Malicious dependency fetches a payload.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
AI agent frameworks are supply chain targets.
Recommended Controls
- Pin Mastra versions and audit dependencies
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/north-korean-hackers-blamed-for-mastra-npm-supply-chain-attack/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.