A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope

A dormant contributor account was used to inject cryptocurrency stealer malware across the entire Mastra npm package scope.