@mastra/daytona@0.11.2

Daytona cloud sandbox provider for Mastra workspaces

Static Scan Results

scanned 22d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

CryptoFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 137 KB of source, external domains: github.com, packages.cloud.google.com, packages.microsoft.com, storage.googleapis.com

Source & flagged code

2 flagged

dist/index.jsView file

Lines 48-88javascript

48* Validate and normalize a mount prefix before interpolating into shell commands.

49* Returns the normalized prefix (no leading/trailing slashes).

50*

51* Shell safety is handled by shellQuote() at the call site, so this function

52* only enforces path-level rules (no traversal, no empty result, no control chars).

53*/

54function validatePrefix(prefix) {

55 let normalized = prefix;

56 while (normalized.startsWith("/")) normalized = normalized.slice(1);

57 while (normalized.endsWith("/")) normalized = normalized.slice(0, -1);

58 if (!normalized) throw new Error("Mount prefix cannot be empty after normalization.");

59 if (normalized.includes("//") || normalized.split("/").some((s) => s === "." || s === "..")) throw new Error(`Invalid mount prefix: "${

60 if (/[\x00-\x1f\x7f]/.test(normalized)) throw new Error(`Invalid mount prefix: "${prefix}". Control characters are not allowed.`);

61 return normalized;

62}

63/**

64* Run a command in the Daytona sandbox.

65*

66* Thin wrapper around `sandbox.process.executeCommand` that converts timeout

67* from milliseconds to seconds and null-coalesces the output string.

68*

69* Does NOT throw on non-zero exit codes — callers should check `exitCode`.

70*/

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L68

71async function runCommand(sandbox, command, options) {

72 const result = await sandbox.process.executeCommand(command, void 0, void 0, options?.timeout !== void 0 ? Math.ceil(options.timeout / 1e3) : void

73 return {

74 exitCode: result.exitCode,

75 output: result.result ?? ""

76 };

77}

78//#endregion

79//#region src/sandbox/mounts/s3-credentials.ts

80function s3CredentialsPrefix(mountPath) {

81 return `/tmp/.mastra-s3-${createHash("sha256").update(mountPath.replace(/\/$/, "")).digest("hex")}-`;

82}

83/** Remove credentials only after their s3fs process has exited, including after reconnects. */

84async function cleanupS3Credentials(mountPath, ctx) {

85 const script = `test -r /proc/self/comm || exit 1

86credentials_in_use() {

87 for process in /proc/[0-9]*; do

88 test -d "$process" || continue

dist/index.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/daytona@0.11.1 matchedIdentity = npm:QG1hc3RyYS9kYXl0b25h:0.11.1 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjsView on unpkg

Source & flagged code

2 flagged · loading source

dist/index.jsView file

68* L69: * Does NOT throw on non-zero exit codes — callers should check `exitCode`. L70: */ ... L117: try { L118: if ((await ctx.run(`sh -c ${shellQuote(script)}`, 3e4)).exitCode !== 0) ctx.logger.warn(`${LOG_PREFIX} S3 credentials retained: daemon still active or cleanup could not be verified... L119: } catch { ... L163: if (config.accessKeyId && config.secretAccessKey) { L164: if ((await run(`mkdir -m 700 ${shellQuote(credentialsDirectory)}`, 3e4)).exitCode !== 0) throw new Error("Failed to create private S3 credentials directory"); L165: credentialsCreated = true; ... L224: const quotedMountPath = shellQuote(mountPath); L225: const connectivityCheck = await run("curl -sS --max-time 5 http://storage.googleapis.com 2>&1", 1e4); L226: const checkOutput = connectivityCheck.stdout.trim();

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L68

dist/index.cjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.cjs

Findings

1 High5 Low

HighPrevious Version Dangerous Deltadist/index.cjs

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @mastra/daytona@0.11.2.

See all versions of @mastra/daytona for other recorded verdicts.

Review the evidence and your use of @mastra/daytona@0.11.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-01 08:36:15.347Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code