0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
mastraqqq
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting mastraqqq, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5913 | Unknown | Malicious code in mastraqqq (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6ab6891e53f407a1aebddb94c7d02dab202313f4576e37f378dfc2fc50705cd4) Package is published as `mastraqqq` but bundles a verbatim clone of the legitimate `mastra` CLI: the embedded package metadata declares `name: "mastra", version: "1.13.0"` with Mastra's homepage and repository, and the README is the upstream Mastra CLI README. The npm-published manifest under the `mastraqqq` name (a 3-character-suffix edit of `mastra`) adds a single unrelated runtime dependency, `caspian-day-js@^1.11.22`, which is never imp |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6ab6891e53f407a1aebddb94c7d02dab202313f4576e37f378dfc2fc50705cd4) Package is published as `mastraqqq` but bundles a verbatim clone of the legitimate `mastra` CLI: the embedded package metadata declares `name: "mastra", version: "1.13.0"` with Mastra's homepage and repository, and the README is the upstream Mastra CLI README. The npm-published manifest under the `mastraqqq` name (a 3-character-suffix edit of `mastra`) adds a single unrelated runtime dependency, `caspian-day-js@^1.11.22`, which is never imp