🧰 create-mastra

The items that name it 3

• Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
  writeup2026-06-18

  npm package in the compromised @mastra scope

• Over 140 popular Mastra npm Packages Hit by Supply Chain Attack
  writeup2026-06-17
• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeup2026-06-16It is written here as create-mastra (npm package).

  compromised version create-mastra@1.13.1