Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier

A malicious transitive dependency hit 140+ npm packages, with tradecraft matching the Axios compromise