Nation-State Actors Are Now Targeting Your AI Agent's npm Packages

This article was originally published on LucidShark Blog. On June 17, 2026, Microsoft Threat Intelligence published a report attributing a supply chain attack on more than 140 packages in the @mastra ...