🧰 mastra

The items that name it 17

• Evolution of Web3 in Cloud Supply Chain Attacks
  articleas classification.key entities2026-10-07
• The State of Cloud Risk 2026: Most Security Findings Aren’t Real Attacker Opportunities
  articleas affected products2026-08-26

  affected by related DPRK supply chain attack

• The OpenSourceMalware Show #18
  talkas classification.key entities2026-08-21
• Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
  writeupas classification.key entities2026-08-20
• We discovered a critical vulnerability in isolated-vm a sandbox that is widely used in popular AI-related projects | Blog | Endor Labs
  advisoryas affected products2026-08-20

  AI agent framework (27k GitHub stars), uses isolated-vm in 'code mode' for model-generated tool-orchestration code

• Cloud Threat Highlights: H1 2026
  writeupas classification.key entities2026-08-06
• OpenSourceMalware Blog
  articleas affected products2026-07-18

  Compromised, discussed alongside agentjacking.

• npm now freezes high-impact accounts after risky account changes
  articleas affected products2026-06-26

  Target of a recent social-engineering account-takeover attack, referenced alongside the axios compromise.

• The OpenSourceMalware Show #10
  talkas classification.key entities2026-06-25
• Everybody's shipping code they can't read
  articleas classification.key entities2026-06-25
• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeupas classification.key entities2026-06-20
• The OpenSourceMalware Show #9
  talkas classification.key entities2026-06-18
• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeupas classification.key entities2026-06-18
• Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
  writeupas affected products2026-06-18

  npm package in the compromised @mastra scope

• Over 140 popular Mastra npm Packages Hit by Supply Chain Attack
  writeupas affected products2026-06-17
• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeupas affected products2026-06-16It is written here as mastra (npm package).

  ~1.5 million downloads/month; compromised version mastra@1.13.1

• Open Source Malware Podcast — episodes
  otheras classification.key entities2026-05-22