Mastra npm Org Compromised: Multiple Packages Trojanized to Drop a Remote Payload via easy-day-js

Reports on a supply chain compromise affecting Mastra npm scope packages, trojanized to drop a remote payload, impacting roughly 28 million downloads a month.