Mastra AI Framework npm Packages Compromised in Supply Chain Attack
Date: 2026-06-17
Attack vector: supply-chain
Category: real-world
Severity: Medium

Tracked by the OECD AI Incidents and Hazards Monitor (AIM) as OECD-AIM-2026-06-17-a9bb, dated 2026-06-17. Classified attack vector: supply-chain. See the AIM incident page (https://oecd.ai/en/incidents/2026-06-17-a9bb) and its cited news sources for full narrative detail.


Mitigations:

Architectural layers (MAESTRO):