Digital Warfare Podcast Daily Brief June 17, 2026

The Digital Warfare Podcast · Jun 17, 2026 · 4m · transcript

Summary

A large scale supply chain attack compromised more than 140 packages within the Mastra AI npm ecosystem after attackers abused a contributor account and inserted a malicious typosquatted dependency called easy day js. The malware deployed credential stealing payloads capable of harvesting developer secrets, cloud credentials, browser data, and cryptocurrency wallet information from workstations and CI/CD environments. The incident highlights the growing focus on AI development ecosystems and software supply chains.

Key Takeaways

• More than 140 Mastra npm packages were compromised in…