The StepSecurity Threat Intelligence Team has identified that multiple mastra npm packages have been compromised.