Microsoft Links Mastra Supply Chain Attack to North Korean Group Sapphire Sleet (infosecurity-magazine.com)

• Microsoft attributes Mastra npm attack to North Korea's Sapphire Sleet
• Over 140 packages poisoned via maintainer account takeover
• Malware targets cryptocurrency wallets and performs system reconnaissance

"Microsoft attributed the supply chain attack on Mastra, an open-source TypeScript framework for AI applications, to North Korean state actor Sapphire Sleet. Over 140 npm packages were poisoned via a compromised maintainer account to deliver malware targeting cryptocurrency wallets."