Microsoft has attributed a supply chain compromise across more than 140 npm packages in the @mastra scope to Sapphire Sleet, also known as BlueNoroff — a North Korean state actor with a documented ...