npm scope
@mastra
LPM Firewall blocks 89 packages in the @mastra npm scope.
Jun 30, 2026
@mastra/agent-browser@0.3.2
MalwareOpenSSF Malicious Packages via OSV confirms @mastra/agent-browser@0.3.2 as malicious (MAL-2026-5996): Malicious code in @mastra/agent-browser (npm)
Jun 30, 2026
@mastra/agent-builder@1.0.42
MalwareOpenSSF Malicious Packages via OSV confirms @mastra/agent-builder@1.0.42 as malicious (MAL-2026-5997): Malicious code in @mastra/agent-builder (npm)
Jun 30, 2026
@mastra/ai-sdk@1.4.6
MalwareOSV/OpenSSF confirms @mastra/ai-sdk@1.4.6 as malicious package MAL-2026-5939. Malicious code in @mastra/ai-sdk (npm)
Jun 30, 2026
@mastra/arize@1.2.3
MalwareOSV/OpenSSF confirms @mastra/arize@1.2.3 as malicious package MAL-2026-5998. Malicious code in @mastra/arize (npm)