Nation-State Actors Are Now Targeting Your AI Agent's npm Packages

Sapphire Sleet (North Korean APT) compromised 140+ Mastra npm packages via postinstall hook to steal AI API keys and cloud credentials from developer machines. Here is how the attack worked and how pre-install scanning stops it.

Raccontata dadev.to