Mend.io Malicious Packages

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - @Mastra

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper

Alina Podoba Jun 17, 2026

Malicious Packages

@Mastra npm: 140+ Packages Compromised

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Shai Hulud Miasma

Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign

Alina Podoba Jun 1, 2026

Malicious Packages

npm packages in @redhat-cloud-services drop a multi-stage cloud credential stealer.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog Cover Threat news

Laravel-Lang Composer tag-rewrite Supply Chain Attack

Alina Podoba May 22, 2026

Malicious Packages

Four Laravel-Lang Composer packages were poisoned via tag rewrite.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Mini Shai Hulud is Back 1

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Alina Podoba May 19, 2026

Malicious Packages

Mini Shai-Hulud strikes again: 323 npm packages compromised via @antv's atool.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Mend securing RubyGems

Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread

Maciej Mensfeld May 14, 2026

Malicious Packages

How Mend.io caught a coordinated RubyGems attack and what it teaches us.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Mini Shai Hulud is Back

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Tom Abai May 12, 2026

Malicious Packages

Shai-Hulud's largest wave: 172 npm and PyPI packages compromised in 48 hours.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - npm supply chain attack

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

Tom Abai May 3, 2026

Malicious Packages

33 malicious NPM packages target DeFi, cloud, and AI developer credentials.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog Cover Linux Kernel LPE

CVE-2026-31431 (Copy Fail): Linux Kernel LPE

Dor Hayun Apr 30, 2026

Malicious Packages

New Linux 'copy_fail' LPE gives root on all major distros. Mitigate before patching.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Mini Shai Hulud

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Tom Abai Apr 29, 2026

Malicious Packages

SAP CAP packages compromised via Claude Code in AI-assisted worm attack.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - The Butlerian Jihad

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026

Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog cover Team PCP part 4 1

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026

Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog cover Poisoned Axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog cover TEAM PCP part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog cover TEAM PCP attack V2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog cover CanisterWorm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper - Blog Zero day Shai hulud V2

Shai-Hulud: The Second Coming

Tom Abai Nov 24, 2025

Malicious Packages

See how the latest Shai-Hulud attack works.

1 2 3