Supply Chain Incidents

MAL-2026-6150

Malicious code in barcodescanner-reconnect (npm)

MAL-2026-6055

Malicious code in @mastra/node-speaker (npm)

MAL-2026-6057

Malicious code in @mastra/voice-playai (npm)

MAL-2026-6052

Malicious code in @mastra/github-signals (npm)

MAL-2026-6053

Malicious code in @mastra/mem0 (npm)

MAL-2026-6054

Malicious code in @mastra/node-audio (npm)

MAL-2026-6056

Malicious code in @mastra/react (npm)

MAL-2026-11205

Malicious code in redis-type-xyz (npm)

MAL-2026-6051

Malicious code in telegram-lite-grabber (PyPI)

MAL-2026-5998

Malicious code in @mastra/arize (npm)

MAL-2026-6045

Malicious code in @mastra/voice-elevenlabs (npm)

MAL-2026-6023

Malicious code in @mastra/gcs (npm)

MAL-2026-6044

Malicious code in @mastra/voice-deepgram (npm)

MAL-2026-6043

Malicious code in @mastra/voice-aws-nova-sonic (npm)

MAL-2026-6048

Malicious code in @mastra/voice-openai (npm)

MAL-2026-6046

Malicious code in @mastra/voice-google (npm)

MAL-2026-6047

Malicious code in @mastra/voice-google-gemini-live (npm)

MAL-2026-6049

Malicious code in @mastra/voice-openai-realtime (npm)

MAL-2026-6024

Malicious code in @mastra/google-cloud-pubsub (npm)

MAL-2026-6021

Malicious code in @mastra/e2b (npm)

MAL-2026-6014

Malicious code in @mastra/daytona (npm)

MAL-2026-6004

Malicious code in @mastra/blaxel (npm)

MAL-2026-6026

Malicious code in @mastra/longmemeval (npm)

MAL-2026-6027

Malicious code in @mastra/mcp-registry-registry (npm)