Vulnerability DB | Snyk

See the full list of npm packages affected by the "Mastra Supply Chain Compromise - June 2026" [View compromised packages].

Find out if you have vulnerabilities that put you at risk

Test your applications

All Vulnerabilities

APPLICATION

Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++

OPERATING SYSTEM

All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi

Report a new vulnerability

C

Embedded Malicious Code

Affects @mastra/spanner | Versions =1.1.2

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/slack | Versions =1.3.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/server | Versions =2.1.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/sentry | Versions =1.1.4

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/schema-compat | Versions =1.2.12

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/s3vectors | Versions =1.0.7

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/s3 | Versions =0.5.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/redis-streams | Versions =0.0.4

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/redis | Versions =1.1.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/react | Versions =1.0.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/railway | Versions =0.1.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/rag | Versions =2.2.2

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/qdrant | Versions =1.0.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/posthog | Versions =1.0.29

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/playground-ui | Versions =33.0.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/pinecone | Versions =1.0.2

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/pg | Versions =1.13.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/perplexity | Versions =0.1.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/otel-exporter | Versions =1.2.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/otel-bridge | Versions =1.2.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/opensearch | Versions =1.0.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/opencode | Versions =0.0.47

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/openai | Versions =1.0.2

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/observability | Versions =1.14.2

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/node-audio | Versions =0.1.8

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/nestjs | Versions =0.1.15

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/mysql | Versions =0.1.1

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/mssql | Versions =1.3.2

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/mongodb | Versions =1.9.3

Has fix

npmPublished 17 Jun 2026

C

Embedded Malicious Code

Affects @mastra/modal | Versions =0.2.2

Has fix

npmPublished 17 Jun 2026

Product

Partners
Developers & Devops Features
Enterprise Features
Pricing
Test with GitHub
Test with CLI
API status

Resources

Vulnerability DB
Blog
Documentation
FAQs

Company

About
Jobs
Contact
Legal terms
Privacy
Press kit
Events

Contact us

Support
Report a new vuln

Find us online

Track our development

© 2026 Snyk Ltd.