# Microsoft links Mastra AI supply chain attack to North Korean hackers

> **Open Intelligence Dossier** · First detected: 2026-06-22 12:07 UTC · Category: Business

## Executive Summary
5 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"Microsoft links Mastra AI supply chain attack to North Korean hackers" is generating significant coverage in the Business category, with 5 articles from 5 distinct sources tracked by PULSE so far.


Outlets currently covering the story include NK News, The Hacker News, StepSecurity and Microsoft. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| NK News | North Korean hackers behind supply chain attack on AI platform: Microsoft | [Source Link](https://news.google.com/rss/articles/CBMiogFBVV95cUxNMzZCLUVRYTIyaUdBQ0hJTlAxdzBNdW9TSEdLdjdLWVZGVi1TWkp1eTR2OEpZaUtJQnJTWWpXRXJ2YlBPdWpHcy0yb1ZjTnk5UlZpYmFLeW9mZlpjbUo5bnlfM0lFTU01d2g0aUQ3Q0RSODJ0WlVvc1B5U3d3bGRueE5teGRkUmVsYVRoLTRFczdSRXdKNHQ5NUNQLWd1TEdkQlE?oc=5) |
| The Hacker News | 145 Mastra npm Packages Compromised via Hijacked Contributor Account | [Source Link](https://news.google.com/rss/articles/CBMihAFBVV95cUxPYzcxMFpXajhvSUNsZHdCblJNeEZ2MmZPUFI0R1Nya2d3cXJ1aGJtYWpkaVBzNElFM3RhQ29xdld6MUpmR09icUpSb2hvQWlRa2F5ajM0UGh5OFRaSFhLVzhFaG1nRWgzS2w3TEd3bWdGX1BQRnJJbnVWQjJ0NFJxd2psN1k?oc=5) |
| StepSecurity | Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat | [Source Link](https://news.google.com/rss/articles/CBMiigFBVV95cUxQVWt5TENWWXNlenB4X3lvRUtPMkFkQmNlcGRuTVhnQVpzcDd4aURUdElOUHhJX0VqanJESDFFTnd6Q2ZnekZocnV1NmNKd1Z0QWZtSDQyWUtJVUNkLUY3UV9vaHF1TlRGbmFrRkJ1MmxyUVAyVExScm9aMXhZcHV5UUI5b1oxVmhyUEE?oc=5) |
| Microsoft | From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet | [Source Link](https://news.google.com/rss/articles/CBMiuwFBVV95cUxQZGluUGtUaUFaVjRleDVqbmNPaGVZVXpWZFFqbVpHU3Q3bVB5V29ZWUZOWTZPa041cFZ0Sk51TDc4M0FoOFVrcHctZWVQTGtKSXBxY3lQaGxxWWxtTnZkZ2tZMlVFUEs4NjVrVEhwUTZmcERrVkUzdUV4cGNRTWk5Q1RKbE5aVmQtV2kzZExtYS1mV29HS1ZTNm5pYzdHZ1dSUzBvMVZVOEhidHdHbDROVnRfRWhNcHZVbHBz?oc=5) |
| BleepingComputer | Microsoft links Mastra AI supply chain attack to North Korean hackers | [Source Link](https://news.google.com/rss/articles/CBMiuAFBVV95cUxNSU1FMDN6WE9wazBDNERTZmo4YUVOb3NZbG9GSkVfeHBaeEFqVVotMVBfY21fcHVXaExsZlFSX18ycVViY25GWXhWMHJTSzJtYlNrVHlRZ01WLTJoT3BsTHd2eVg2bHVYNjlLZWRBanl3UXU0dnZFWW93aFZieWRULUl6QWNkdjVrS3Zuc19FQkdEcEt1ajZKdzBuajJiVGJYbV94cTlKVTNPbFYtb1dJTlpYRUo1el9R0gG-AUFVX3lxTE9na0xfTU50N1VRelE2U1hfRjFkUi1feVZlVU9FT216YWUxQ1VtcjRPa1hCcXJwbng1dTNvNXhlbzg5b2FlMURSZ3dJeXI4RXhIOXFNUmh5ZDV2anFLRXJldWxPeFczLXBXaEFwQXFWMGw1MFlPOHlBWmhfM1B0NFRiN0hNdlRQVUZOVFVjRmJveUtucEVVOEtUd0Y) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-06-22/microsoft-links-mastra-ai-supply-chain-attack-to-north-korean-hackers*