Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npm@mastra/deployer-vercel | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/docker | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/dsql | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/duckdb | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/dynamodb | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/e2b | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/editor | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/elasticsearch | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/engine | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/evals | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/express | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/fastembed | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/fastify | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/files-sdk | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/gcs | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/github-signals | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/google-cloud-pubsub | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/google-drive | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/hono | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/inngest | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/koa | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/laminar | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/lance | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/langfuse | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/langsmith | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/libsql | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/loggers | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/longmemeval | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mcp | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mcp-docs-server | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mcp-registry-registry | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mem0 | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/memory | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/modal | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mongodb | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mssql | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/mysql | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/nestjs | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/node-audio | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/observability | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/openai | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/opencode | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/opensearch | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/otel-bridge | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/otel-exporter | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/perplexity | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/pg | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/pinecone | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/playground-ui | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/posthog | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 |