← All packages

Supply-chain attacks we’ve detected

Popular npm packages whose release stream was tampered with — versions our own analysis flagged as a likely account takeover, often before any public advisory landed. None of these versions were ever served from this registry; where the package still has clean releases, those keep flowing.

191
Packages hit
304
Blocked versions
2
GreenFlagged-confirmed catches

updated

Attacks we’ve detected

Coordinated supply-chain attacks that hit many packages at once — an entire npm scope having install hooks injected on the same day, for example. We rejected every impacted version; none were ever greenflagged or served from this registry.

7 attacks · 189 packages · 302 versions

@mastra scope compromise — malicious manual-publish burst (provenance regression), 2026/06/17 Coordinated attack
79 packages · 79 versions
Detected –
Impacted packages (79)
@mastra/agent-browser 0.3.2
@mastra/agent-builder 1.0.42
@mastra/agentfs 0.1.1
@mastra/arize 1.2.3
@mastra/arthur 0.3.3
@mastra/astra 1.0.2
@mastra/auth-better-auth 1.0.4
@mastra/auth-cloud 1.1.4
@mastra/auth-okta 0.0.5
@mastra/auth-studio 1.2.4
@mastra/auth-workos 1.5.3
@mastra/azure 0.2.3
@mastra/blaxel 0.4.2
@mastra/browser-viewer 0.1.3
@mastra/chroma 1.0.2
@mastra/client-js 1.24.1
@mastra/cloudflare 1.4.2
@mastra/cloudflare-d1 1.0.7
@mastra/convex 1.2.2
@mastra/couchbase 1.0.4
@mastra/daytona 0.4.2
@mastra/deployer 1.42.1
@mastra/deployer-cloud 1.42.1
@mastra/deployer-cloudflare 1.1.44
@mastra/deployer-netlify 1.1.20
@mastra/deployer-vercel 1.1.38
@mastra/docker 0.3.1
@mastra/e2b 0.3.4
@mastra/elasticsearch 1.2.1
@mastra/express 1.3.31
@mastra/gcs 0.2.3
@mastra/github-signals 0.1.2
@mastra/google-cloud-pubsub 1.0.6
@mastra/google-drive 0.1.1
@mastra/koa 1.5.14
@mastra/laminar 1.2.3
@mastra/lance 1.0.7
@mastra/loggers 1.1.3
@mastra/longmemeval 1.0.50
@mastra/mcp-registry-registry 1.0.2
@mastra/memory 1.20.4
@mastra/modal 0.2.2
@mastra/mssql 1.3.2
@mastra/nestjs 0.1.15
@mastra/observability 1.14.2
@mastra/opencode 0.0.47
@mastra/opensearch 1.0.3
@mastra/otel-exporter 1.2.3
@mastra/perplexity 0.1.1
@mastra/pinecone 1.0.2
@mastra/playground-ui 33.0.1
@mastra/qdrant 1.0.3
@mastra/react 1.0.1
@mastra/redis 1.1.3
@mastra/s3vectors 1.0.7
@mastra/server 2.1.1
@mastra/slack 1.3.1
@mastra/stagehand 0.2.5
@mastra/tavily 1.0.3
@mastra/temporal 0.1.14
@mastra/turbopuffer 1.0.3
@mastra/upstash 1.1.3
@mastra/vectorize 1.0.3
@mastra/vercel 1.0.1
@mastra/voice-aws-nova-sonic 0.1.4
@mastra/voice-azure 0.11.2
@mastra/voice-cloudflare 0.12.3
@mastra/voice-deepgram 0.12.2
@mastra/voice-elevenlabs 0.12.2
@mastra/voice-gladia 0.12.2
@mastra/voice-google 0.12.3
@mastra/voice-google-gemini-live 0.12.2
@mastra/voice-modelslab 0.1.2
@mastra/voice-murf 0.12.3
@mastra/voice-openai 0.12.3
@mastra/voice-openai-realtime 0.12.6
@mastra/voice-playai 0.12.2
@mastra/voice-sarvam 1.0.2
@mastra/voice-speechify 0.12.2
@antv scope compromise — injected preinstall hooks (2026-05-19) Coordinated attack
75 packages · 150 versions
Detected –
Impacted packages (75)
@antv/algorithm 0.3.26 0.2.26
@antv/async-hook 2.4.9 2.3.9
@antv/ava 3.6.1 3.5.1
@antv/chart-visualization-skills 0.3.3 0.2.3
@antv/color-schema 0.4.3 0.3.3
@antv/color-util 2.2.6 2.1.6
@antv/component 2.3.11 2.2.11
@antv/coord 0.6.7 0.5.7
@antv/data-set 0.13.8 0.12.8
@antv/event-emitter 0.3.3 0.2.3
@antv/expr 1.2.2 1.1.2
@antv/g 6.5.1 6.4.1
@antv/g-base 0.7.16 0.6.16
@antv/g-camera-api 2.2.45 2.1.45
@antv/g-canvas 2.4.0 2.3.0
@antv/g-device-api 1.8.13 1.7.13
@antv/g-dom-mutation-observer-api 2.2.42 2.1.42
@antv/g-lite 2.9.0 2.8.0
@antv/g-math 3.3.0 3.2.0
@antv/g-plugin-canvas-path-generator 2.3.26 2.2.26
@antv/g-plugin-canvas-picker 2.5.1 2.4.1
@antv/g-plugin-canvas-renderer 2.7.1 2.6.1
@antv/g-plugin-dom-interaction 2.3.31 2.2.31
@antv/g-plugin-dragndrop 2.3.1 2.2.1
@antv/g-plugin-html-renderer 2.5.1 2.4.1
@antv/g-plugin-image-loader 2.5.1 2.4.1
@antv/g-plugin-rough-canvas-renderer 2.3.1 2.2.1
@antv/g-plugin-svg-picker 2.2.46 2.1.46
@antv/g-plugin-svg-renderer 2.6.1 2.5.1
@antv/g-svg 2.3.1 2.2.1
@antv/g-web-animations-api 2.3.32 2.2.32
@antv/g2 5.6.8 5.5.8
@antv/g2-brush 0.2.2 0.1.2
@antv/g2-extension-plot 0.4.2 0.3.2
@antv/g2-plugin-slider 2.3.1 2.2.1
@antv/g2-ssr 0.4.0 0.3.0
@antv/g2plot 2.6.35 2.5.35
@antv/g6 5.3.1 5.2.1
@antv/g6-extension-react 0.4.7 0.3.7
@antv/g6-ssr 0.3.1 0.2.1
@antv/gpt-vis 1.2.0 1.1.0
@antv/gpt-vis-ssr 0.5.7 0.4.7
@antv/graphin 3.2.5 3.1.5
@antv/graphlib 2.2.4 2.1.4
@antv/hierarchy 0.9.1 0.8.1
@antv/infographic 0.4.19 0.3.19
@antv/l7-draw 3.3.5 3.2.5
@antv/l7-utils 2.27.10 2.26.10
@antv/matrix-util 3.2.4 3.1.4
@antv/mcp-server-antv 0.3.8 0.2.8
@antv/path-util 3.2.1 3.1.1
@antv/s2 2.9.1 2.8.1
@antv/s2-ssr 0.3.1 0.2.1
@antv/scale 0.7.2 0.6.2
@antv/smart-color 0.4.1 0.3.1
@antv/t8 0.5.0 0.4.0
@antv/util 3.5.11 3.4.11
@antv/vendor 1.2.11 1.1.11
@antv/x6 3.3.7 3.2.7
@antv/x6-common 2.2.17 2.1.17
@antv/x6-geometry 2.2.5 2.1.5
@antv/x6-plugin-clipboard 2.3.6 2.2.6
@antv/x6-plugin-dnd 2.3.1 2.2.1
@antv/x6-plugin-export 2.3.6 2.2.6
@antv/x6-plugin-history 2.4.4 2.3.4
@antv/x6-plugin-keyboard 2.4.3 2.3.3
@antv/x6-plugin-minimap 2.2.7 2.1.7
@antv/x6-plugin-scroller 2.2.10 2.1.10
@antv/x6-plugin-selection 2.4.2 2.3.2
@antv/x6-plugin-snapline 2.3.7 2.2.7
@antv/x6-plugin-stencil 2.3.5 2.2.5
@antv/x6-plugin-transform 2.3.8 2.2.8
@antv/x6-react-components 2.2.9 2.1.9
@antv/x6-react-shape 3.2.1 3.1.1
@antv/x6-vue-shape 3.2.2 3.1.2
@redhat-cloud-services scope compromise — injected preinstall hooks (2026-06-01) Coordinated attack
20 packages · 46 versions
Detected –
Impacted packages (20)
@redhat-cloud-services/compliance-client 4.0.6 4.0.4
@redhat-cloud-services/config-manager-client 5.0.7 5.0.5 5.0.4
@redhat-cloud-services/entitlements-client 4.0.12
@redhat-cloud-services/frontend-components-config 6.11.4
@redhat-cloud-services/frontend-components-config-utilities 4.11.5 4.11.3 4.11.2
@redhat-cloud-services/hcc-feo-mcp 0.3.4 0.3.2
@redhat-cloud-services/hcc-kessel-mcp 0.3.4 0.3.2 0.3.1
@redhat-cloud-services/hcc-pf-mcp 0.6.2 0.6.1
@redhat-cloud-services/host-inventory-client 5.0.6 5.0.4 5.0.3
@redhat-cloud-services/insights-client 4.0.7 4.0.5 4.0.4
@redhat-cloud-services/integrations-client 6.0.7 6.0.5
@redhat-cloud-services/javascript-clients-shared 2.0.11 2.0.9
@redhat-cloud-services/notifications-client 6.1.7 6.1.5 6.1.4
@redhat-cloud-services/patch-client 4.0.5 4.0.4
@redhat-cloud-services/quickstarts-client 4.0.12 4.0.11
@redhat-cloud-services/rbac-client 9.0.6 9.0.4
@redhat-cloud-services/remediations-client 4.0.7 4.0.5 4.0.4
@redhat-cloud-services/sources-client 3.0.13 3.0.11 3.0.10
@redhat-cloud-services/topological-inventory-client 3.0.11
@redhat-cloud-services/tsc-transform-imports 1.2.6 1.2.4 1.2.2
@asyncapi scope compromise - obfuscated backdoor dropper spliced into legitimate source (2026-07-14) Coordinated attack
4 packages · 4 versions
Detected
Impacted packages (4)
@clearpool scope compromise — install-script data exfiltration (2026-04-26) Coordinated attack
4 packages · 16 versions
Detected –
Impacted packages (4)
hustcc / @antv account takeover — injected @antv/setup malware (2026-05-19) Coordinated attack
4 packages · 4 versions
Detected –
Impacted packages (4)
Mini Shai-Hulud (compromised atool account) — preinstall exfil worm Coordinated attack
3 packages · 3 versions
Detected –
Impacted packages (3)

Caught by GreenFlagged

Confirmed supply-chain compromises our team surfaced on popular, previously-trusted packages — a swapped maintainer, an injected install hook, a dropped provenance attestation — the patterns real account takeovers leave behind. We caught several of these before any public advisory landed; clean releases keep flowing.

art-template Caught by GreenFlagged clean versions still served
33,236 weekly downloads

Compromised release: remote-script injector (git.youzzjizz.com/git.js) hidden in the shipped bundle; version-header mismatch. Caught before any advisory (not in OSV).

JavaScript Template Engine

Blocked 1 version: 4.13.3
detected
path-addon Caught by GreenFlagged
479 weekly downloads

Remote-code loader: fetches a base64-encoded URL at import and eval()s the payload — caught by our analyzers before the advisory; all versions blocked.

Node.js path module

Read the writeup →

Blocked 1 version: 1.0.1
detected