registry / @mastra/deployer / 1.52.1

@mastra/deployer@1.52.1

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime package-manager operations and .npmrc copying occur only during an explicit deployment build and target generated output.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit consumer deployment/build invocation

Impact

Expected deployment artifact generation; no unconsented install-time action or exfiltration identified

Mechanism

Bundles a project, installs its declared output dependencies, and creates a lockfile

Rationale

The flagged primitives are package-aligned deployment behavior reached at runtime, not install time. Source inspection found no concrete malicious chain.

Evidence

package.jsondist/chunk-7BCMZXLF.cjsdist/chunk-FKKJQUGR.cjsdist/chunk-GRTBDDCI.cjs

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Deployment runtime invokes the selected package manager.
Build flow copies a project .npmrc into its generated output.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hook.
npm command is lockfile-only and scoped to the generated deployment directory.
Package-manager spawning is explicit deploy/build functionality with argument validation.
No credential exfiltration, remote payload fetch, eval/vm use, or persistence found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 68 file(s), 1.68 MB of source, external domains: agentskills.io, cdn.jsdelivr.net, cdnjs.cloudflare.com, json-schema.org, mastra.ai, output.signals.mastra.ai

Source & flagged code

6 flagged

dist/chunk-7BCMZXLF.cjsView file

Lines 1-27javascript

1'use strict';

3var chunk36AWZH7Z_cjs = require('./chunk-36AWZH7Z.cjs');

4var chunkGRTBDDCI_cjs = require('./chunk-GRTBDDCI.cjs');

5var chunk3XIMK24X_cjs = require('./chunk-3XIMK24X.cjs');

6var chunkFKKJQUGR_cjs = require('./chunk-FKKJQUGR.cjs');

7var chunkJZRFRUGM_cjs = require('./chunk-JZRFRUGM.cjs');

8var child_process = require('child_process');

9var fs = require('fs');

High

Child Process

Package source references child process execution.

dist/chunk-7BCMZXLF.cjsView on unpkg · L7

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-7BCMZXLF.cjsView on unpkg · L7

10var promises = require('fs/promises');

11var path = require('path');

12var bundler = require('@mastra/core/bundler');

13var error = require('@mastra/core/error');

14var virtual = require('@rollup/plugin-virtual');

15var pkg = require('empathic/package');

16var fsExtra = require('fs-extra/esm');

17var tinyglobby = require('tinyglobby');

19function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }

21function _interopNamespace(e) {

22 if (e && e.__esModule) return e;

23 var n = Object.create(null);

24 if (e) {

25 Object.keys(e).forEach(function (k) {

26 if (k !== 'default') {

27 var d = Object.getOwnPropertyDescriptor(e, k);

Lines 123-163javascript

123 deps.__setLogger(this.logger);

124 await deps.install({ dir: path.join(outputDirectory, this.outputDir) });

125 }

126 /**

127 * Generate a package-lock.json for the output directory so that deploy targets

128 * can use `npm ci` instead of `npm install`, skipping version resolution entirely.

129 * This is a lockfile-only operation — no packages are downloaded.

dist/chunk-YUBKHO52.jsView file

Lines 15-55javascript

15 const line = chunk.toString().trim();

16 if (line) {

17 console.info(line);

18 logger.info(line);

19 }

dist/sury-CWZTCd75-3KQQJ22C.cjsView file

Lines 1-17javascript

1'use strict';

3var chunkV3EKV6QB_cjs = require('./chunk-V3EKV6QB.cjs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/sury-CWZTCd75-3KQQJ22C.cjsView on unpkg · L2

5// ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@standard-community/standard-json/0.3.5/9dbc67da7ef95ab6ba977b83f155ade1f3176d290d47d40a60434eb3472caaac/node_modules/@standard-community/standard-json/dist/sury-CWZTCd75.js

6async

dist/chunk-GRTBDDCI.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/deployer@1.48.0 matchedIdentity = npm:QG1hc3RyYS9kZXBsb3llcg:1.48.0 similarity = 0.692 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-GRTBDDCI.cjsView on unpkg

Source & flagged code

6 flagged · loading source

dist/chunk-7BCMZXLF.cjsView file

7var chunkJZRFRUGM_cjs = require('./chunk-JZRFRUGM.cjs'); L8: var child_process = require('child_process'); L9: var fs = require('fs');

High

Child Process

Package source references child process execution.

dist/chunk-7BCMZXLF.cjsView on unpkg · L7

7Cross-file remote execution chain: dist/chunk-7BCMZXLF.cjs spawns dist/chunk-GRTBDDCI.cjs; helper contains network access plus dynamic code execution. L7: var chunkJZRFRUGM_cjs = require('./chunk-JZRFRUGM.cjs'); L8: var child_process = require('child_process'); L9: var fs = require('fs'); ... L56: async writePackageJson(outputDirectory, dependencies, resolutions) { L57: this.logger.debug("Writing project's package.json"); L58: await fsExtra.ensureDir(outputDirectory); ... L120: } L121: async installDependencies(outputDirectory, rootDir = process.cwd()) { L122: const deps = new chunkFKKJQUGR_cjs.DepsService(rootDir); ... L210: { L211: "process.env.NODE_ENV": JSON.stringify("production") L212: },

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-7BCMZXLF.cjsView on unpkg · L7

143} L144: child_process.execSync("npm install --package-lock-only --force", { L145: cwd: outputDir,

Findings

1 Critical4 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/chunk-GRTBDDCI.cjs

HighChild Processdist/chunk-7BCMZXLF.cjs

HighShelldist/chunk-YUBKHO52.js

HighCross File Remote Execution Contextdist/chunk-7BCMZXLF.cjs

HighRuntime Package Installdist/chunk-7BCMZXLF.cjs

MediumDynamic Requiredist/sury-CWZTCd75-3KQQJ22C.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings