Security News 144 Mastra npm Packages Compromised via Hijacked Contributor Account TheHackerNews Daniel Bender 17 Jun 2026 Share 144 Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.