Company News
Jerod Santo Joins Socket as Head of Media
Allow myself to introduce... myself.
By Jerod Santo - Sep 14, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@mastra/auth
Advanced tools
This package has malicious versions linked to the ongoing "Mastra AI framework compromise" supply chain attack.
Affected versions:
@mastra/auth
Core Auth methods for Mastra applications.
Installation
npm install @mastra/auth
FAQs
Unknown package
The npm package @mastra/auth receives a total of 21,913 weekly downloads. As such, @mastra/auth popularity was classified as popular.
We found that @mastra/auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Package last updated on 02 Jul 2026
Related posts
Research
/Security News
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.
By Kush Pandya - Sep 11, 2026
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
By Sarah Gooding - Sep 10, 2026