Supply Chain Incidents

MAL-2026-5996

Malicious code in @mastra/agent-browser (npm)

MAL-2026-6031

Malicious code in @mastra/otel-exporter (npm)

MAL-2026-6033

Malicious code in @mastra/playground-ui (npm)

MAL-2026-6019

Malicious code in @mastra/docker (npm)

MAL-2026-6040

Malicious code in @mastra/turbopuffer (npm)

MAL-2026-6017

Malicious code in @mastra/deployer-netlify (npm)

MAL-2026-6013

Malicious code in @mastra/cursor (npm)

MAL-2026-6006

Malicious code in @mastra/claude (npm)

MAL-2026-6016

Malicious code in @mastra/deployer-cloudflare (npm)

MAL-2026-6008

Malicious code in @mastra/cloudflare (npm)

MAL-2026-6032

Malicious code in @mastra/pinecone (npm)

MAL-2026-6018

Malicious code in @mastra/deployer-vercel (npm)

MAL-2026-6041

Malicious code in @mastra/upstash (npm)

MAL-2026-6035

Malicious code in @mastra/s3vectors (npm)

MAL-2026-6010

Malicious code in @mastra/convex (npm)

MAL-2026-6042

Malicious code in @mastra/vectorize (npm)

MAL-2026-6034

Malicious code in @mastra/qdrant (npm)

MAL-2026-6005

Malicious code in @mastra/chroma (npm)

MAL-2026-6012

Malicious code in @mastra/couchbase (npm)

MAL-2026-6009

Malicious code in @mastra/cloudflare-d1 (npm)

MAL-2026-6000

Malicious code in @mastra/auth-better-auth (npm)

MAL-2026-5999

Malicious code in @mastra/auth-auth0 (npm)

MAL-2026-6003

Malicious code in @mastra/auth-workos (npm)

MAL-2026-6020

Malicious code in @mastra/dsql (npm)