Security news

Malicious, hijacked and vulnerable packages that AI agents install, from OSV.dev advisories and AptLynx's nightly checks of the tools it lists. Each story says what the advisory says, which catalogue entries it affects and what to do. Subscribe with the RSS feed.

Before an agent installs something, check it: check_tools over MCP at https://aptlynx.net/mcp, or GET /v1/check?item=npm:name.

• Malicious release of mastra (1.13.1) · Malicious release · 17 June 2026
  OSV.dev lists one release of mastra as malicious (MAL-2026-5965). The current release is not one of them.
• Malicious release of mcp-server-chart (0.10.10, 0.11.10) · Malicious release · 19 May 2026
  OSV.dev lists 2 releases of mcp-server-chart as malicious (MAL-2026-4069). The current release is not one of them.
• Malicious release of @bitwarden/cli (2026.4.0) · Malicious release · 23 April 2026
  OSV.dev lists one release of @bitwarden/cli as malicious (MAL-2026-3020). The current release is not one of them.
• Malicious release of cline (2.3.0) · Malicious release · 19 February 2026
  OSV.dev lists one release of cline as malicious (MAL-2026-1380). The current release is not one of them.
• Malicious release of license-o-matic (1.2.1, 1.2.2) · Malicious release · 24 November 2025
  OSV.dev lists 2 releases of license-o-matic as malicious (MAL-2025-191123). The current release is not one of them.
• Malicious release of @mcp-use/inspector (0.6.2, 0.6.3) · Malicious release · 24 November 2025
  OSV.dev lists 2 releases of @mcp-use/inspector as malicious (MAL-2025-190868). The current release is not one of them.
• Malicious release of @postman/postman-mcp-server (2.4.11, 2.4.10, 2.4.12) · Malicious release · 24 November 2025
  OSV.dev lists 3 releases of @postman/postman-mcp-server as malicious (MAL-2025-190909). The current release is not one of them.
• Malicious release of @asyncapi/modelina-cli (5.10.3, 5.10.2) · Malicious release · 24 November 2025
  OSV.dev lists 2 releases of @asyncapi/modelina-cli as malicious (MAL-2025-190660). The current release is not one of them.
• Malicious release of asyncapi (4.1.3, 4.1.2) · Malicious release · 24 November 2025
  OSV.dev lists 2 releases of asyncapi as malicious (MAL-2025-190653). The current release is not one of them.
• Malicious release of @posthog/cli (0.5.15) · Malicious release · 24 November 2025
  OSV.dev lists one release of @posthog/cli as malicious (MAL-2025-190671). The current release is not one of them.
• Malicious release of nx (20.9.0, 20.10.0, 20.11.0 …) · Malicious release · 27 August 2025
  OSV.dev lists 8 releases of nx as malicious (MAL-2025-41443). The current release is not one of them.