Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npm@mastra/qdrant | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/rag | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/railway | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/react | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/redis | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/redis-streams | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/s3 | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/schema-compat | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/sentry | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/server | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/node-speaker | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/s3vectors | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/slack | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/spanner | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-azure | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-elevenlabs | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-google | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-ibm | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-murf | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-openai | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-replicate | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/speech-speechify | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/stagehand | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/tavily | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/temporal | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/turbopuffer | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/twilio | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/upstash | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/vectorize | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/vercel | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-aws-nova-sonic | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-azure | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-cloudflare | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-deepgram | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-elevenlabs | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-gladia | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-google | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-google-gemini-live | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-inworld | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-modelslab | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-murf | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-openai | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-openai-realtime | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-playai | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-sarvam | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-speechify | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/voice-xai-realtime | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npmcreate-mastra | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npmmastra | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npmprocwire | c2 agent, persistence, other | 1 |