PkgRadar

npm · registry.npmjs.org

@mastra/opensearch

Remote Payload: matched "curl "

Why PkgRadar flagged 0.0.0-workflow-graph-crash-20260527191009

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-channels-on-lease-20260612211814Low risk02026-06-12
1.0.2Low risk02026-06-12
1.0.2-alpha.0Low risk02026-06-12
0.0.0-channels-on-lease-20260611222452Low risk02026-06-12
1.0.1Low risk02026-06-11
0.0.0-channels-on-lease-20260611220645Low risk02026-06-11
0.0.0-channels-output-processor-20260605211340Low risk02026-06-05
0.0.0-channels-output-processor-20260605192833Low risk02026-06-05
0.0.0-signals-pubsub-reserve-20260605182857Low risk02026-06-05
0.0.0-channels-owner-stream-20260605033931Low risk02026-06-05
0.0.0-channels-owner-stream-20260605010922Low risk02026-06-05
0.0.0-channels-owner-stream-20260605004943Low risk02026-06-05
0.0.0-channels-owner-stream-20260604235257Low risk02026-06-05
0.0.0-channels-owner-stream-20260604231429Low risk02026-06-04
0.0.0-yj-ab-demo-20260604080218Low risk02026-06-04
0.0.0-wardpeet-auth-rework-20260604074715Low risk02026-06-04
0.0.0-yj-ab-demo-20260604061738Low risk02026-06-04
0.0.0-yj-ab-demo-20260604051858Low risk02026-06-04
0.0.0-yj-ab-demo-20260603185651Low risk02026-06-03
0.0.0-declined-tool-result-fix-20260602220958Low risk02026-06-02
0.0.0-deploy-alex-2-20260602122535Low risk02026-06-02
0.0.0-fix-create-observability-org-selection-20260529112852Low risk02026-05-29
0.0.0-feat-playground-ui-input-button-groups-20260529070627Low risk02026-05-29
0.0.0-graph-crash-v3-20260528202217Low risk02026-05-28
0.0.0-workflow-graph-crash-20260527191009Review32026-05-28
0.0.0-fix-workflow-graph-part-2-20260527233847Review32026-05-28
0.0.0-fix-playground-ui-context-menu-z-index-20260527122415Review32026-05-27
0.0.0-posthog-env-respect-20260526194440Review32026-05-27
0.0.0-a-b-demo-20260526202724Review32026-05-27

Block this in CI

PkgRadar gates @mastra/opensearch (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mastra/[email protected]
Start free — 25 scans / moView full evidence