On June 17, 2026, an attacker hijacked a former maintainer's account to republish 143 packages in the @mastra npm scope, injecting a malicious dependency named easy-day-js. This dependency, masquerading as a clone of the…
You've read today's free cluster
A free account gives you 3 clusters a day, entity pages, and defensive countermeasures, clustered from 14,000+ sources in real time. No card needed.