# The Mastra AI Ecosystem Was Poisoned At The Registry Level

DevFeed: [The Mastra AI Ecosystem Was Poisoned At The Registry Level](<https://devfeed.tech/articles/the-mastra-ai-ecosystem-was-poisoned-at-the-registry-level-13458.md>)

Original publisher: [Read original article](<https://www.harness.io/blog/poisoning-the-pipeline-how-the-mastra-ai-ecosystem-was-poisoned-at-the-registry-level>)

Author: Roshan Piyush

Published: 2026-07-14T00:00:00Z

Content type: article

Language: en

Sources: [Harness Blog](<https://devfeed.tech/sources/harness-blog.md>)

Topics: [software supply-chain attack](<https://devfeed.tech/topics/software-supply-chain-attack.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [malicious-packages](<https://devfeed.tech/tags/malicious-packages.md>), [malware](<https://devfeed.tech/tags/malware.md>), [mastra](<https://devfeed.tech/tags/mastra.md>), [npm](<https://devfeed.tech/tags/npm.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [software-supply-chain-attack](<https://devfeed.tech/tags/software-supply-chain-attack.md>), [typescript](<https://devfeed.tech/tags/typescript.md>)

## AI overview

The article examines a June 17, 2026 software supply-chain attack targeting the Mastra AI TypeScript ecosystem. It reports that a compromised contributor account was used to publish 144 malicious packages under the official @mastra npm scope, with registry-level changes introducing the easy-day-js transitive dependency. Installations during the compromise window could expose developer workstations, CI/CD runners, and cloud environments to an information stealer.

## Source excerpt

Learn how the Mastra AI supply chain attack poisoned npm packages, impacted AI pipelines, and how Harness SCS helps detect, block, and remediate compromised dep | Blog