StepSecurity Logo
StepSecurity
⌘K

    • Get Started

    • Overview

    • Threat Center

      • Workflow Runs

      • Baseline

      • Detections

      • Suppression Rules

      • Policy Store

      • Self Hosted Runners

      • Installation

    • Action Secrets

    • Apps & PATs

  3. compromised-packages
  5. Analyze @mastra/schema-compat Compromised Package

Jobs

  • download-package
  • install-compromised-package

install-compromised-package

Harden-runner policy:
audit
Start time:17 Jun 2026 02:15:41 GMTRunner name:-Duration:55sJob labels:ubuntu-latest
Show:
Show all steps
StepPIDProcessDestinationPortStatus
Setup Node.jsactions/setup-node@v4
2237nodeGitHubapi.github.com443Allowed17 Jun 2026 02:15:47
Setup Node.jsactions/setup-node@v4
2237nodeGitHubgithub.comAPI Calls1443Allowed17 Jun 2026 02:15:47
Setup Node.jsactions/setup-node@v4
2237nodeGitHubrelease-assets.githubusercontent.comAPI Calls1443Allowed17 Jun 2026 02:15:48
Install compromised package
2284envnpm Registryregistry.npmjs.orgAPI Calls15443Allowed17 Jun 2026 02:15:52
Install compromised package
2296node23.254.164.928000Attack Blocked17 Jun 2026 02:15:53