Supply Chain Incidents

MAL-2026-6023

Malicious code in @mastra/gcs (npm)

MAL-2026-6044

Malicious code in @mastra/voice-deepgram (npm)

MAL-2026-6043

Malicious code in @mastra/voice-aws-nova-sonic (npm)

MAL-2026-6048

Malicious code in @mastra/voice-openai (npm)

MAL-2026-6046

Malicious code in @mastra/voice-google (npm)

MAL-2026-6047

Malicious code in @mastra/voice-google-gemini-live (npm)

MAL-2026-6049

Malicious code in @mastra/voice-openai-realtime (npm)

MAL-2026-6024

Malicious code in @mastra/google-cloud-pubsub (npm)

MAL-2026-6021

Malicious code in @mastra/e2b (npm)

MAL-2026-6014

Malicious code in @mastra/daytona (npm)

MAL-2026-6004

Malicious code in @mastra/blaxel (npm)

MAL-2026-6026

Malicious code in @mastra/longmemeval (npm)

MAL-2026-6027

Malicious code in @mastra/mcp-registry-registry (npm)

MAL-2026-5997

Malicious code in @mastra/agent-builder (npm)

MAL-2026-6037

Malicious code in @mastra/stagehand (npm)

MAL-2026-6038

Malicious code in @mastra/tavily (npm)

MAL-2026-6039

Malicious code in @mastra/temporal (npm)

MAL-2026-5996

Malicious code in @mastra/agent-browser (npm)

MAL-2026-6031

Malicious code in @mastra/otel-exporter (npm)

MAL-2026-6033

Malicious code in @mastra/playground-ui (npm)

MAL-2026-6019

Malicious code in @mastra/docker (npm)

MAL-2026-6040

Malicious code in @mastra/turbopuffer (npm)

MAL-2026-6017

Malicious code in @mastra/deployer-netlify (npm)

MAL-2026-6013

Malicious code in @mastra/cursor (npm)