Supply Chain Incidents

MAL-2026-5971

Malicious code in @public-for-cdao/hooks (npm)

cryptodao-contracts

MAL-2026-5975

Malicious code in cryptodao-contracts (npm)

cryptodao-core

MAL-2026-5976

Malicious code in cryptodao-core (npm)

cryptodao-bot

MAL-2026-5974

Malicious code in cryptodao-bot (npm)

cryptodao-utils

MAL-2026-5978

Malicious code in cryptodao-utils (npm)

cryptodao-signer

MAL-2026-5977

Malicious code in cryptodao-signer (npm)

cryptodao-deploy

MAL-2026-5968

Malicious code in cryptodao-deploy (npm)

cryptodao-config

MAL-2026-5967

Malicious code in cryptodao-config (npm)

cryptodao-types

MAL-2026-5970

Malicious code in cryptodao-types (npm)

cryptodao-backend

MAL-2026-5966

Malicious code in cryptodao-backend (npm)

cryptodao-sdk

MAL-2026-5969

Malicious code in cryptodao-sdk (npm)

@mastra/posthog

MAL-2026-5960

Malicious code in @mastra/posthog (npm)

@mastra/clickhouse

MAL-2026-5942

Malicious code in @mastra/clickhouse (npm)

@mastra/inngest

MAL-2026-5951

Malicious code in @mastra/inngest (npm)

@mastra/braintrust

MAL-2026-5941

Malicious code in @mastra/braintrust (npm)

@mastra/fastify

MAL-2026-5949

Malicious code in @mastra/fastify (npm)

@mastra/mongodb

MAL-2026-5957

Malicious code in @mastra/mongodb (npm)

@mastra/rag

MAL-2026-5961

Malicious code in @mastra/rag (npm)

@mastra/mcp-docs-server

MAL-2026-5956

Malicious code in @mastra/mcp-docs-server (npm)

@mastra/langsmith

MAL-2026-5953

Malicious code in @mastra/langsmith (npm)

@mastra/s3

MAL-2026-5962

Malicious code in @mastra/s3 (npm)

@mastra/sentry

MAL-2026-5964

Malicious code in @mastra/sentry (npm)

@mastra/fastembed

MAL-2026-5948

Malicious code in @mastra/fastembed (npm)

@mastra/auth

MAL-2026-5940

Malicious code in @mastra/auth (npm)