Tag: easy-day-js

1 Attack Reports | 0 Vulnerabilities

Attack reports

140+ npm Packages Compromised in Coordinated Supply Chain Attack

More than 140 Mastra npm packages were compromised through a supply chain attack that injected a typosquatted dependency called easy-day-js. A single npm account published malicious versions within a short timeframe, affecting packages including @mastra/core with over 918K weekly downloads. The att…
typosquatting
infostealer
cryptocurrency theft
supply chain attack
npm packages
persistence mechanism
2026-06-17
cross-platform stealer
easy-day-js
postinstall hook
Published: June 17, 2026
Downloadable IOCs: 7
Click here to see more Attack Reports