@mastra npm scope takeover: 143 packages backdoored via compromised contributor account

A supply chain attack compromised all 143 @mastra npm packages via a backdoored contributor account. Chainguard customers stayed protected through malware blocking and source-built libraries.