registry / @mastra/core / 1.48.0

@mastra/core@1.48.0

AI Security Review

scanned 17d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established by static inspection. The risky primitives are runtime AI-agent framework capabilities exposed to consumers, not unconsented lifecycle mutation or hidden malware behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User imports and invokes Mastra agent/runtime APIs.

Impact

Runtime behavior depends on consumer configuration and tools; no package-owned automatic compromise path identified.

Mechanism

User-configured AI agent framework with provider/network and tool execution support

Rationale

Static inspection found no lifecycle hooks, persistence, foreign AI-agent control-surface writes, credential exfiltration, or automatic install/import-time execution. The scanner findings map to expected AI framework runtime capabilities and bundled helper code rather than a concrete malicious delivery mechanism.

Evidence

package.jsondist/chunk-PQ5PN4TW.jsdist/chunk-ZVZXKOMS.cjs

Decision evidence

public snapshot

AI called this Clean at 83.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json has no npm lifecycle install/preinstall/postinstall hooks.
Runtime agent code includes tool execution abstractions and model/network integrations typical for an AI framework.
dist/chunk-PQ5PN4TW.js includes agent workflows with tool calls, retries, streaming, and provider error handling.
dist/chunk-ZVZXKOMS.cjs contains bundler dynamic require helper, not an install-time payload loader.

Evidence against

No install-time execution found in package.json scripts.
No writes to .mcp.json, CLAUDE.md, Codex/Cursor/Claude settings, shell startup, VCS hooks, or OS persistence paths found.
No credential harvesting or broad env/file enumeration tied to exfiltration found in inspected hot files.
child_process references are package-aligned runtime utilities/tool execution paths, not automatic execution on import/install.
Network use is expected for AI provider/telemetry/runtime APIs and is user-invoked through framework code.

Behavioral surface

Source

ChildProcessCryptoDynamicRequire

Source & flagged code

12 flagged

dist/chunk-PQ5PN4TW.jsView file

63import { createRequire } from 'module'; L64: import { execFileSync } from 'child_process'; L65: import { StringDecoder } from 'string_decoder';

High

Child Process

Package source references child process execution.

dist/chunk-PQ5PN4TW.jsView on unpkg · L63

41482L41483: // src/workspace/sandbox/execa.ts L41484: var cached2;

High

Shell

Package source references shell execution.

dist/chunk-PQ5PN4TW.jsView on unpkg · L41482

63import { createRequire } from 'module'; L64: import { execFileSync } from 'child_process'; L65: import { StringDecoder } from 'string_decoder'; ... L4280: }); L4281: this.readFile = options.readFile ?? ((path7) => readFileSync(path7, "utf-8")); L4282: this.getIgnoredInstructionPaths = options.getIgnoredInstructionPaths; ... L4498: Rules: L4499: - Call the available tools via the \`external_*\` functions declared below. Each L4500: returns a Promise \u2014 \`await\` it. ... L34711: var HttpRemoteStrategy = class _HttpRemoteStrategy { L34712: #baseUrl; L34713: #auth;

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-PQ5PN4TW.jsView on unpkg · L63

63Cross-file remote execution chain: dist/chunk-PQ5PN4TW.js spawns dist/chunk-PS2LUACH.js; helper contains network access plus dynamic code execution. L63: import { createRequire } from 'module'; L64: import { execFileSync } from 'child_process'; L65: import { StringDecoder } from 'string_decoder'; ... L187: if (sdkTool.inputSchema) { L188: if ("$schema" in sdkTool.inputSchema && typeof sdkTool.inputSchema.$schema === "string" && sdkTool.inputSchema.$schema.startsWith("http://json-schema.org/")) { L189: parameters = sdkTool.inputSchema; ... L560: if (resourceIds.length === 0) { L561: return { status: 200, body: { matched: 0 } }; L562: } ... L4129: function toAbsolutePath(candidatePath) { L4130: return normalize(isAbsolute(candidatePath) ? candidatePath : resolve(process.cwd(), candidatePath)

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-PQ5PN4TW.jsView on unpkg · L63

dist/chunk-ZVZXKOMS.cjsView file

Lines 1-22javascript

1'use strict';

3var chunk2UAP4LDC_cjs = require('./chunk-2UAP4LDC.cjs');

4var crypto$1 = require('crypto');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-ZVZXKOMS.cjsView on unpkg · L2

dist/chunk-QJ3FDYCK.cjsView file

•path = dist/chunk-QJ3FDYCK.cjs kind = oversized_source_file sizeBytes = 2118002 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/chunk-QJ3FDYCK.cjsView on unpkg

dist/docs/references/reference-storage-clickhouse.mdView file

Lines 239-279markdown

239

240ClickHouse runs anywhere you can reach it over HTTP. Two common choices:

241

242- **[ClickHouse Cloud](https://clickhouse.com/cloud)**: Managed service with a free trial tier. Provides connection details directly compatible with `url`, `username`, and `password`.

243- **Self-hosted**

dist/docs/references/reference-storage-postgresql.mdView file

Lines 85-125markdown

85 connectionString: 'postgresql://user:password@localhost:5432/mydb',

86})

88// Using a connection string with pool options

89const store2 = new PostgresStore({

90 id: 'pg-storage-2',

91 connectionString: 'postgresql://user:password@localhost:5432/mydb',

92 schemaName: 'custom_schema',

93 max: 30, // Max pool connections

94 idleTimeoutMillis: 60000, // Idle timeout

dist/docs/references/reference-storage-mssql.mdView file

Lines 57-97markdown

57 id: 'mssql-storage-1',

58 connectionString:

59 'Server=localhost,1433;Database=mydb;User Id=sa;Password=password;Encrypt=true;TrustServerCertificate=true',

60})

62// Using a connection string with a custom schema name

63const store2 = new MSSQLStore({

64 id: 'mssql-storage-2',

65 connectionString:

66 'Server=localhost,1433;Database=mydb;User Id=sa;Password=password;Encrypt=true;TrustServerCertificate=true',

dist/docs/references/reference-vectors-pg.mdView file

53patternName = generic_password severity = medium line = 53 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/docs/references/reference-vectors-pg.md

dist/docs/references/reference-vectors-pg.mdView on unpkg · L53

dist/docs/references/reference-storage-redis.mdView file

35patternName = generic_password severity = medium line = 35 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/docs/references/reference-storage-redis.md

dist/docs/references/reference-storage-redis.mdView on unpkg · L35

Source & flagged code

12 flagged · loading source

dist/chunk-PQ5PN4TW.jsView file

63import { createRequire } from 'module'; L64: import { execFileSync } from 'child_process'; L65: import { StringDecoder } from 'string_decoder';

High

Child Process

Package source references child process execution.

dist/chunk-PQ5PN4TW.jsView on unpkg · L63

41482L41483: // src/workspace/sandbox/execa.ts L41484: var cached2;

High

Shell

Package source references shell execution.

dist/chunk-PQ5PN4TW.jsView on unpkg · L41482

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-PQ5PN4TW.js

Findings

5 High10 Medium5 Low

HighChild Processdist/chunk-PQ5PN4TW.js

HighShelldist/chunk-PQ5PN4TW.js

HighRemote Agent Bridgedist/chunk-PQ5PN4TW.js

HighCross File Remote Execution Contextdist/chunk-PQ5PN4TW.js

HighOversized Source Filedist/chunk-QJ3FDYCK.cjs

MediumDynamic Requiredist/chunk-ZVZXKOMS.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/docs/references/reference-storage-clickhouse.md

MediumSecret Patterndist/docs/references/reference-storage-postgresql.md

MediumSecret Patterndist/docs/references/reference-storage-mssql.md

Medium