--- title: "Mastra npm scope hijacked, AWS Summit drops agentic infrastructure wave" url: https://daily.dev/posts/mastra-npm-scope-hijacked-aws-summit-drops-agentic-infrastructure-wave-x9nq2izi2 source_url: https://daily.dev/posts/mastra-npm-scope-hijacked-aws-summit-drops-agentic-infrastructure-wave-x9nq2izi2 type: freeform source: "Backend Digest" published: 2026-06-18T04:19:31.753Z updated: 2026-06-18T04:19:49.502Z tags: ["security", "cyber", "aws", "postgresql", "npm"] reading_time: 5 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Mastra npm scope hijacked, AWS Summit drops agentic infrastructure wave **[Backend Digest](https://daily.dev/sources/backend_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A supply chain attack on June 17 compromised 144 @mastra npm packages including @mastra/core (~918K weekly downloads) via a hijacked contributor account and a typosquatted dayjs dependency that installs a cryptocurrency stealer. Any system that ran npm install after June 16 should be treated as fully compromised. AWS Summit New York featured major agentic infrastructure launches: Bedrock AgentCore went GA with full agent orchestration, a managed Knowledge Base launched with hybrid search and MCP integration, and the DevOps Agent gained release management capabilities in preview. PostgreSQL 18 arrived on Aurora and RDS with a 21x multicolumn index skip scan speedup, native uuidv7() support, and SCRAM-SHA-256 replacing MD5 auth. Vercel launched the eve open-source TypeScript agent framework and Agent Stack. Additional highlights include the FortiBleed campaign compromising ~50% of internet-facing Fortinet firewalls, Tesco suing Broadcom over VMware pricing, RFC 10008 standardizing the HTTP QUERY method, Z.ai releasing the 753B GLM-5.2 open-source model, and Uber's sub-40ms agent identity system using OAuth 2.0 Token Exchange. ## Content **TLDR:** A supply chain attack on June 17 compromised 144 @mastra npm packages including @mastra/core (~918K weekly downloads), injecting a cryptocurrency stealer via a typosquatted dayjs dependency. Any CI runner or dev machine that ran npm install after June 16 should be treated as fully compromised. AWS Summit New York ran heavy on agentic infrastructure: Bedrock AgentCore went GA, a managed Knowledge Base launched, and the DevOps Agent got release management capabilities in preview. PostgreSQL 18 landed on Aurora and RDS with a 21x speedup on multicolumn index skip scans and native uuidv7() support. --- ## 144 @mastra npm packages backdoored via hijacked contributor account An attacker took over a dormant contributor account (ehindero) and republished 142 @mastra/* packages with a malicious transitive dependency — easy-day-js, a dayjs typosquat — whose postinstall hook downloads a second-stage infostealer, harvests browser credentials and 166 crypto wallet extensions, and installs cross-platform persistence. @mastra/core alone pulls ~918K downloads per week. Any workstation, CI runner, or build system that installed affected packages after June 16 should be treated as fully compromised: rotate all credentials (especially LLM API keys given Mastra's agent framework context), migrate crypto wallets, remove persistence artifacts, and reimage affected hosts. Socket flagged easy-day-js within six minutes of publication; the attack exploited npm's lack of scope permission expiry on inactive accounts. [Read more](https://app.daily.dev/feed-by-ids?id=GjI1XidW9&id=BkPVk6Ohg&id=ExaKcctN3) ## AWS Summit New York: AgentCore GA, managed Knowledge Base, DevOps Agent release management Amazon Bedrock AgentCore is now generally available, handling the full agent orchestration loop — tool execution, context management, session state, crash recovery, and session isolation — with model-agnostic design that lets you swap providers mid-session. The managed Knowledge Base (also GA) ships with six native connectors, hybrid search, and agentic multi-hop retrieval, integrating with AgentCore Gateway via MCP. The AWS DevOps Agent added release management in preview: a release readiness review that posts BLOCK/Proceed/Safe verdicts as PR comments, and autonomous release testing that generates and runs change-specific test plans in customer-provisioned environments — both free during preview in US East. AWS Continuum also launched in gated preview, automating the full vulnerability lifecycle from ingestion through sandbox-validated exploitability proofs to durable fixes. [Read more](https://app.daily.dev/feed-by-ids?id=EaeLX4Y0E&id=LFOGBfa0k&id=VGon8G72V&id=cJX1UHGhU&id=SO1feWjTb&id=HGAON9AXO&id=ytJsePakt&id=opmxTLlIi) ## PostgreSQL 18 on Aurora and RDS: 21x skip scan speedup, uuidv7(), SCRAM-SHA-256 migration The skip scan optimization lets multicolumn B-tree indexes handle queries missing leading columns, with a 21x speedup demonstrated in AWS testing — a meaningful win for schemas where leading-column queries aren't always practical. Native uuidv7() generates timestamp-ordered UUIDs that avoid B-tree index fragmentation, a direct replacement for the common uuid_generate_v7() extension workaround. On the security side, MD5 password authentication is deprecated in favor of SCRAM-SHA-256; existing admin passwords stay as MD5 hashes until the admin logs in post-upgrade, so you need to force logins after upgrading. Other notable additions: Self-Join Elimination, idle_replication_slot_timeout to auto-invalidate abandoned slots, and logical replication streaming defaulting to parallel. [Read more](https://app.daily.dev/feed-by-ids?id=LaG8EHltp&id=9ik7LiFYC) ## Vercel Ship 2026: eve agent framework, Agent Stack, Vercel Connect Vercel launched eve, an open-source TypeScript framework that structures agents as a directory of files covering model config, instructions, tools, skills, subagents, channels, and schedules — the same filesystem-first pattern Next.js used for routing. Built-in durable execution, sandboxed compute, human-in-the-loop approvals, and OpenTelemetry tracing are included. The broader Agent Stack bundles AI SDK, AI Gateway, Workflow SDK, Vercel Sandbox, and Vercel Connect — which issues short-lived scoped credentials for services like Slack, GitHub, Snowflake, and Salesforce rather than distributing long-lived API keys. Vercel reports running 100+ internal agents on eve, including a support agent resolving 92% of tickets autonomously. [Read more](https://app.daily.dev/feed-by-ids?id=oOkKhaL8m&id=AT3krHCTW&id=fdO6N1gYy&id=wxLFAwJmb&id=n0CkcBdnm) --- ## Also notable - **FortiBleed campaign: ~50% of internet-facing Fortinet firewalls have cracked admin credentials:** Threat actors are extracting configs from FortiGate devices across 194 countries and cracking legacy SHA-256 password hashes, yielding verified admin credentials for an estimated 30,000–75,000 devices; FortiOS introduced PBKDF2 hashing in recent versions but existing passwords stay as SHA-256 until the admin logs in post-upgrade, so forcing all admins to log in after upgrading is a required remediation step alongside MFA enforcement and restricting management interface access. [Read more](https://app.daily.dev/posts/LtgO9sZfm) - **Tesco suing Broadcom, migrating 40,000 VMware workloads after alleged 175% price hike:** Tesco filed in the UK High Court claiming Broadcom refused to honor perpetual licenses purchased in 2021 and hiked VMware prices by approximately 175%, with migration off VMware expected to complete no earlier than end of 2027. [Read more](https://app.daily.dev/posts/c4ZzBFI11) - **RFC 10008 published: HTTP QUERY method is now a standard:** RFC 10008 (published June 15, 2026) defines the HTTP QUERY method — a safe, idempotent, cacheable verb that accepts a request body, filling the long-standing gap for JSON-RPC and structured query APIs that couldn't use GET but didn't want POST's no-cache semantics. [Read more](https://app.daily.dev/posts/4azpxBMjt) - **GLM-5.2: 753B open-source model, 1M context, top open-source on FrontierSWE behind Claude Opus 4.8:** Z.ai released GLM-5.2 under MIT license with a reliable 1M-token context window (up from 200K), IndexShare architecture reducing per-token FLOPs by 2.9x at 1M context, and benchmark results placing it as the top open-source model on FrontierSWE and SWE-Marathon, trailing only Claude Opus 4.8; it supports vLLM and SGLang. [Read more](https://app.daily.dev/posts/stmNmWjOk) - **Uber's agent identity system: sub-40ms P99 token exchange across thousands of internal agents:** Uber published details of its production multi-agent identity architecture using OAuth 2.0 Token Exchange and SPIRE workload identities to issue short-lived single-hop JWTs carrying a full actor chain, with P99 token exchange latency under 40ms across thousands of internal agents — a concrete reference implementation for teams designing agent authorization. [Read more](https://app.daily.dev/posts/FhkR4TFQi) ## Similar posts on daily.dev - [144 Mastra npm Packages Compromised via Supply Chain Attack](https://daily.dev/posts/144-mastra-npm-packages-compromised-via-supply-chain-attack-gji1xidw9) · Orca Security Blog · 0 upvotes · 0 comments - [Over 140 popular Mastra npm Packages Hit by Supply Chain Attack](https://daily.dev/posts/over-140-popular-mastra-npm-packages-hit-by-supply-chain-attack-cci9tnher) · Aikido Security · 1 upvotes · 0 comments - [Mastra npm Scope Takeover](https://daily.dev/posts/mastra-npm-scope-takeover-bkpvk6ohg) · Snyk · 3 upvotes · 0 comments - [140\+ Mastra npm Packages Compromised in Coordinated Supply C...](https://daily.dev/posts/140-mastra-npm-packages-compromised-in-coordinated-supply-c--exakcctn3) · Socket · 4 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#aws](https://daily.dev/tags/aws), [#postgresql](https://daily.dev/tags/postgresql), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/mastra-npm-scope-hijacked-aws-summit-drops-agentic-infrastructure-wave-x9nq2izi2)