Multiple mastra NPM packages compromised (github.com)

Mastra is an open-source TypeScript framework for building AI agents, workflows, and RAG pipelines.

The StepSecurity Threat Intelligence Team has identified that multiple mastra npm packages have been compromised.