Malicious Packages

Malicious code in @mastra/agent-builder (npm)

Malicious code in @mastra/temporal (npm)

Malicious code in @mastra/tavily (npm)

Malicious code in @mastra/stagehand (npm)

Malicious code in @mastra/agent-browser (npm)

Malicious code in @mastra/otel-exporter (npm)

Malicious code in @mastra/playground-ui (npm)

Malicious code in @mastra/docker (npm)

Malicious code in @mastra/turbopuffer (npm)

Malicious code in @mastra/deployer-netlify (npm)

Malicious code in @mastra/cursor (npm)

Malicious code in @mastra/claude (npm)

Malicious code in @mastra/deployer-cloudflare (npm)

Malicious code in @mastra/cloudflare (npm)

Malicious code in @mastra/pinecone (npm)

Malicious code in @mastra/deployer-vercel (npm)

Malicious code in @mastra/upstash (npm)

Malicious code in @mastra/s3vectors (npm)

Malicious code in @mastra/convex (npm)

Malicious code in @mastra/vectorize (npm)

Malicious code in @mastra/qdrant (npm)

Malicious code in @mastra/chroma (npm)

Malicious code in @mastra/couchbase (npm)

Malicious code in @mastra/cloudflare-d1 (npm)

Malicious code in @mastra/auth-better-auth (npm)

Malicious code in @mastra/dsql (npm)

Malicious code in @mastra/auth-workos (npm)

Malicious code in @mastra/auth-auth0 (npm)

Malicious code in @mastra/mssql (npm)

Malicious code in @mastra/auth-supabase (npm)

Malicious code in @mastra/auth-clerk (npm)

Malicious code in @mastra/koa (npm)

Malicious code in @mastra/express (npm)

Malicious code in @mastra/nestjs (npm)

Malicious code in @mastra/server (npm)

Malicious code in @mastra/memory (npm)

Malicious code in @mastra/client-js (npm)

Malicious code in @mastra/deployer (npm)

Malicious code in @mastra/core (npm)

Malicious code in create-mastra (npm)

Malicious code in metrics-probe-64b2 (npm)

Malicious code in metrics-probe-77d4 (npm)

Malicious code in metrics-probe-dc85 (npm)

Malicious code in pkg-telemetry-r4f9 (npm)

Malicious code in runtime-metrics-w7k2 (npm)

Malicious code in npm-sandbox-ping-r9t2 (npm)

Malicious code in gpu-accelerator (npm)

Malicious code in canary-ci-test (npm)

Malicious code in nepublisher (npm)

Malicious code in ts-webplug (npm)