Supply Chain Incidents

MAL-2026-5963

Malicious code in @mastra/schema-compat (npm)

MAL-2026-5939

Malicious code in @mastra/ai-sdk (npm)

MAL-2026-5952

Malicious code in @mastra/langfuse (npm)

MAL-2026-5955

Malicious code in @mastra/mcp (npm)

MAL-2026-5959

Malicious code in @mastra/pg (npm)

MAL-2026-5954

Malicious code in @mastra/libsql (npm)

MAL-2026-5965

Malicious code in mastra (npm)

MAL-2026-5937

Malicious code in abuden21 (npm)

MAL-2026-5938

Malicious code in speed4 (npm)

MAL-2026-5929

Malicious code in backoffice-charges-module (npm)

MAL-2026-5930

Malicious code in bubblestr (npm)

MAL-2026-5935

Malicious code in tw-theme-kit (npm)

MAL-2026-5936

Malicious code in vite-config-field (npm)

MAL-2026-5933

Malicious code in react-vite-assert (npm)

MAL-2026-5934

Malicious code in ssr-auth-sync (npm)

MAL-2026-5932

Malicious code in package-uploader (npm)

MAL-2026-5931

Malicious code in mci-sdk (npm)

MAL-2026-5928

Malicious code in chai-test-mocks (npm)

MAL-2026-5927

Malicious code in aillmgen (npm)

MAL-2026-5922

Malicious code in @kalipto/local (npm)

MAL-2026-5926

Malicious code in test-copppss (npm)

MAL-2026-5923

Malicious code in @welcome-onboarding-web/mobile-focus-account-beta-merging (npm)

MAL-2026-5924

Malicious code in binproto (npm)

MAL-2026-5925

Malicious code in motion-lib (npm)