Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.
This week’s recap covers exploited flaws, supply chain attacks, phishing kits, AI lures, macOS stealers, urgent CVEs, tools, ...