144 Mastra npm Packages Compromised via Hijacked Contributor Account

In a significant supply chain attack, 144 Mastra npm packages were compromised after attackers hijacked a contributor's account. The breach highlights ongoing security vulnerabilities in the JavaScript package ecosystem, where compromised developer credentials can lead to widespread distribution of malicious code. This incident underscores the critical need for stronger authentication measures and monitoring of package repositories that millions of developers rely on daily.