Product
Socket Now Protects the Microsoft Edge Extension Ecosystem
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.
By John Tuckner - Aug 28, 2026
New:Socket for Asana Is Now Available.Learn more →
@mastra/opencode
Advanced tools
This package has malicious versions linked to the ongoing "Mastra AI framework compromise" supply chain attack.
Affected versions:
- Version
- 0.1.20-alpha.1
- Version published
- Weekly downloads
- 3.4K -10.16%
- Maintainers
- 7
Weekly downloads
- Created
The README file is missing
FAQs
OpenCode plugin for Mastra Observational Memory
The npm package @mastra/opencode receives a total of 1,996 weekly downloads. As such, @mastra/opencode popularity was classified as popular.
We found that @mastra/opencode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Package last updated on 26 Aug 2026
Related posts
Research
/Security News
19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads
Socket researchers found 18 Chrome extensions and one Edge extension delivering a wallet drainer, credential theft, and other malicious payloads.
By Karlo Zanki - Aug 27, 2026
Product
Socket for ClickUp Is Now Available
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.
By Jeppe Hasseriis - Aug 26, 2026