Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-26 · source-backed
On June 17, an attacker compromised the @mastra npm org via a former contributor's still-active scope access, added a dayjs typosquat as a dependency across 140+ packages, and mass-published 144 malicious versions inside 88 minutes. Combined 1.1M+ weekly downloads exposed. Microsoft attributed it with high confidence to Sapphire Sleet (BlueNoroff/APT38). AI agent frameworks are now first-class supply-chain targets, and stale scope access is still the way in.
Each link below shares sources, entities, or timing with this story.
Microsoft criticizes Claude Code / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft criticizes Claude Code); both cover APT38, BlueNoroff, Microsoft, North Korea; overlapping topics (agent, apt38, attributed).
Microsoft criticizes Claude Code / Shared entity: Microsoft / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft criticizes Claude Code); both cover Microsoft; overlapping topics (access, agent).
Anthropic partners with Microsoft / Shared entity: Microsoft / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic partners with Microsoft); both cover Microsoft; overlapping topics (access, agent).
Microsoft released Azure / Shared entity: Microsoft / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Microsoft released Azure); both cover Microsoft; overlapping topics (agent, attacker).
Microsoft released VS Code / Shared entity: Microsoft / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Microsoft released VS Code); both cover Microsoft; overlapping topics (access, agent).
Microsoft released Project Perception / Shared entity: Microsoft / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Project Perception); both cover Microsoft; overlapping topics (access, agent).
Microsoft criticizes Semantic Kernel / Shared entity: Microsoft / Shared topic / What happened next
Linked by a graph relationship (Microsoft criticizes Semantic Kernel); both cover Microsoft; overlapping topics (access, agent).
Microsoft competes with Google / Shared entity: Microsoft / Shared topic / What happened next
Linked by a graph relationship (Microsoft competes with Google); both cover Microsoft; overlapping topics (agent, attacker).