@mastra/deployer-cloud@1.82.0
AI Security Review
scanned 22h ago · by lpm-firewall-aiThe flagged bundle initializes PostHog telemetry against an external analytics host and enables autocapture by default when Studio is used. This is suspicious runtime telemetry because the reviewed package source does not disclose the collection, though an opt-out exists and the initializer shows no credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A deployment enables Studio and a user opens it, mounting the analytics component.
Impact
Browser interaction telemetry may be sent to PostHog. The reviewed code does not show this initializer sending credentials or server environment values.
Mechanism
The bundled PostHog SDK initializes against https://us.posthog.com with autocapture enabled by default; a telemetry-disabled flag suppresses initialization.
AI rationale
The flagged bundle initializes PostHog telemetry against an external analytics host and enables autocapture by default when Studio is used. This is suspicious runtime telemetry because the reviewed package source does not disclose the collection, though an opt-out exists and the initializer shows no credential exfiltration.
Evidence
dist/studio/assets/main-C4wZvSZw.jsdist/studio/index.htmldist/index.js
Network endpoints1
us.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The bundled PostHog configuration enables autocapture by default and uses https://us.i.posthog.com.
- When the Studio analytics component mounts, it initializes PostHog unless the browser is Brave or telemetry is disabled.
- The CloudDeployer copies Studio assets only when Studio is enabled; its constructor defaults Studio to false.
- The package manifest has build, test, and lint scripts, with no install lifecycle hook.
Evidence against
- Studio telemetry has a MASTRA_TELEMETRY_DISABLED opt-out.
- The reviewed analytics initializer does not show credentials or server environment values being sent.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flaggeddist/studio/assets/main-C4wZvSZw.jsView file
•Credential-bearing message sent to a fixed external iframe in dist/studio/assets/main-C4wZvSZw.js:
import{a as e,i as t,n,r,t as i}from"./rolldown-runtime-BWaJ3C7D.js";import{t as a}from"./preload-helper-CRzLMJPS.js";import{$t as o,At as s,B as c,Bt as l,C as u,Ct as d,Dt as f,E...
`+e.stack}}var ke=Object.prototype.hasOwnProperty,Ae=t.unstable_scheduleCallback,je=t.unstable_cancelCallback,Me=t.unstable_shouldYield,Ne=t.unstable_requestPaint,Pe=t.unstable_now...
]))`;continue}}n.s&&r[e]===`.`?i+=o?`${r[e]}\r\n`:`[${r[e]}\r\n]`:(i+=r[e],r[e]===`\\`?a=!0:o&&r[e]===`]`?o=!1:!o&&r[e]===`[`&&(o=!0))}try{new RegExp(i)}catch{return console.warn(`...
Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let n of e.seen.entries()){let r=n[1];if(t===n[0])a(n);else{if
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/studio/assets/main-C4wZvSZw.jsView on unpkg•path = dist/studio/assets/main-C4wZvSZw.js
kind = oversized_source_file
sizeBytes = 6587272
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/studio/assets/main-C4wZvSZw.jsView on unpkgFindings
1 Critical7 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/studio/assets/main-C4wZvSZw.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/studio/assets/main-C4wZvSZw.js
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/studio/assets/main-C4wZvSZw.js
MediumAi Review Evidencedist/studio/assets/main-C4wZvSZw.js
MediumAi Review Evidencedist/index.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/deployer-cloud@1.82.0.
See all versions of @mastra/deployer-cloud for other recorded verdicts.
- Review the evidence and your use of @mastra/deployer-cloud@1.82.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.