Blog

Thoughts, tutorials, and insights on IT infrastructure, cybersecurity, and systems administration.

Filter:

STARDUST CHOLLIMAMastra+6 more

How North Korea Poisoned 131 Mastra npm Packages to Hit AI Developers

DPRK-linked STARDUST CHOLLIMA hijacked a dormant Mastra maintainer account and mass-published a poisoned dependency across 131+ npm packages in 88 minutes, stealing credentials from AI developers before they ran a single line of their own code.

Sep 13, 2026

Chat with me!