Supply Chain Incidents

MAL-2026-5957

Malicious code in @mastra/mongodb (npm)

@mastra/mcp-docs-server

MAL-2026-5956

Malicious code in @mastra/mcp-docs-server (npm)

@mastra/langsmith

MAL-2026-5953

Malicious code in @mastra/langsmith (npm)

@mastra/sentry

MAL-2026-5964

Malicious code in @mastra/sentry (npm)

@mastra/s3

MAL-2026-5962

Malicious code in @mastra/s3 (npm)

@mastra/fastembed

MAL-2026-5948

Malicious code in @mastra/fastembed (npm)

@mastra/auth

MAL-2026-5940

Malicious code in @mastra/auth (npm)

@mastra/datadog

MAL-2026-5943

Malicious code in @mastra/datadog (npm)

@mastra/hono

MAL-2026-5950

Malicious code in @mastra/hono (npm)

@mastra/editor

MAL-2026-5946

Malicious code in @mastra/editor (npm)

@mastra/otel-bridge

MAL-2026-5958

Malicious code in @mastra/otel-bridge (npm)

@mastra/dynamodb

MAL-2026-5945

Malicious code in @mastra/dynamodb (npm)

@mastra/duckdb

MAL-2026-5944

Malicious code in @mastra/duckdb (npm)

@mastra/schema-compat

MAL-2026-5963

Malicious code in @mastra/schema-compat (npm)

@mastra/evals

MAL-2026-5947

Malicious code in @mastra/evals (npm)

@mastra/ai-sdk

MAL-2026-5939

Malicious code in @mastra/ai-sdk (npm)

@mastra/langfuse

MAL-2026-5952

Malicious code in @mastra/langfuse (npm)

@mastra/mcp

MAL-2026-5955

Malicious code in @mastra/mcp (npm)

@mastra/pg

MAL-2026-5959

Malicious code in @mastra/pg (npm)

@mastra/libsql

MAL-2026-5954

Malicious code in @mastra/libsql (npm)

mastra

MAL-2026-5965

Malicious code in mastra (npm)

abuden21

MAL-2026-5937

Malicious code in abuden21 (npm)

speed4

MAL-2026-5938

Malicious code in speed4 (npm)

backoffice-charges-module

MAL-2026-5929

Malicious code in backoffice-charges-module (npm)

Typosquat