---
id: 2419
title: "Over 140 popular Mastra npm Packages Hit by Supply Chain Attack"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/over-140-popular-mastra-npm-packages-hit-by-supply-chain-attack"
published_at: "2026-06-17 00:00"
tags: ["ai-security", "supply-chain", "open-source", "malware", "npm", "aikido", "ai-agents", "supply-chain-attack", "mastra", "crypto-theft", "postinstall", "wallet-theft", "crypto-wallets", "crypto-wallet-theft", "crypto-wallet-stealer", "dayjs"]
phying_url: "https://phying.com/item/2419"
lang: en
---

# Over 140 popular Mastra npm Packages Hit by Supply Chain Attack

## Summary

Aikido detected an attack republishing 141 @mastra npm packages with a malicious dayjs clone, easy-day-js, whose postinstall hook deploys a payload targeting 160+ browser crypto wallets.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-06-17 00:00
- **Original:** https://www.aikido.dev/blog/over-140-popular-mastra-npm-packages-hit-by-supply-chain-attack
- **Phying News:** https://phying.com/item/2419