MindPattern
← The Wire

Security2026-06-23 · source-backed

Microsoft pins the 144-package @mastra npm worm on North Korea's Sapphire Sleet, and the payload targets AI IDE configs.

Confidence
source-backed
Sources
1
Redaction
passed

Story

Microsoft Threat Intelligence attributed the 88-minute @mastra supply-chain attack with high confidence to Sapphire Sleet (BlueNoroff/APT38), the same actor behind the earlier Axios HTTP-client compromise. (TechTimes) The new and nasty detail: the payload injects persistent backdoor files that execute whenever a developer opens the project in an AI-assisted IDE, with dedicated hooks for Claude Code, Cursor, and Gemini. Your AI coding assistant's config is now an explicit persistence target, not collateral. Audit what your IDE auto-loads on project open. That .cursor or agent config directory is executable surface.

Related stories

Each link below shares sources, entities, or timing with this story.

  1. Shared entities / Shared topic / What happened next

    North Korea backdoored 144 agent-framework npm packages in 88 minutes.

    Both cover APT38, BlueNoroff, Microsoft, North Korea; overlapping topics (agent, apt38, attributed); picks up the APT38 thread on 2026-06-26.

  2. Shared entities / Shared topic / What happened next / Tension

    The config file is the new attack surface, across every IDE.

    Both cover Claude Code, Cursor, Gemini, IDE; overlapping topics (attack, config, cursor); picks up the Claude Code thread on 2026-06-26.

  3. Shared entities / Shared topic / Earlier coverage

    SymJack and TrustFall: new symlink-hijack and RCE chains hit six AI coding agents.

    Both cover Audit, Claude Code, Cursor, Microsoft; overlapping topics (agent, attack, cursor); earlier Audit coverage from 2026-06-05.

  4. Cursor, Baton, and Replit All Ship Multi-Agent Orchestration in the Same Week. AI Pair Programming Is Already Obsolete.

    Both cover Claude Code, Cursor, Gemini, IDE; overlapping topics (agent, cursor); earlier Claude Code coverage from 2026-04-12.

  5. Cursor 3 Ships the Agent-First IDE. Worktrees, Best-of-N, and Design Mode Change the Game.

    Both cover Claude Code, Cursor, Gemini, IDE; overlapping topics (agent, cursor); earlier Claude Code coverage from 2026-04-07.

  6. Shared entities / Shared topic / What happened next

    AI coding tools converge on portable skills

    Both cover Claude Code, Cursor, Gemini; overlapping topics (agent, config, cursor); picks up the Claude Code thread on 2026-07-01.

  7. Shared entities / Shared topic / Earlier coverage / Tension

    Cursor 3 Ditches VS Code for Agent Orchestration. Claude Code Holds 54% Market Share at $1.2B ARR.

    Both cover Claude Code, Cursor, IDE; overlapping topics (agent, cursor); earlier Claude Code coverage from 2026-04-16.

  8. Cursor 3 Ditches VS Code Entirely. Rewrites in Rust. Default View Is an Agent Panel, Not an Editor.

    Both cover Claude Code, Cursor, IDE; overlapping topics (agent, cursor); earlier Claude Code coverage from 2026-04-08.

Source trail

TechTimes

Entities

AI IDEAPT38AuditAxios HTTPBlueNoroffClaude CodeCursorGeminiIDEMicrosoftMicrosoft Threat IntelligenceNorth KoreaSapphire SleetTechTimes

Provenance

Canonical issue
Ramsay Research Agent — June 23, 2026
AI generated
no
Story unit
2026-06-23-microsoft-pins-the-144-package-mastra-npm-worm-on-north-korea-s-sapphire-sleet-and-the-payload-t
Labels
source-backed, canonical briefing excerpt