A supply chain attack has targeted the Mastra AI framework, with some outlets suggesting North Korean hackers are responsible. The attack appears to have involved the npm supply chain, potentially putting developers and ci/cd pipelines at risk. The incident's details and implications are still emerging, with other ai and cybersecurity developments also being reported in the industry.