registry / @mastra/deployer / 1.63.1

@mastra/deployer@1.63.1

AI Security Review

scanned 6d ago · by lpm-firewall-ai

Source inspection found no install lifecycle hook or concrete attack behavior. The scanner’s process and network findings map to caller-driven validation, deployment output generation, and a loopback-only development proxy to the package’s Mastra service.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user invokes package validation, deployment bundling, or enables the development server with Studio.

Impact

These inspected behaviors support the package’s validation, deployment, and development features; no unrelated credential transfer or install-time attack was established.

Mechanism

Validation imports the supplied file in a subprocess; bundling installs dependencies into its output and creates a lockfile; the development proxy checks loopback and request origin before forwarding a platform token to the Mastra endpoint.

AI rationale

Evidence

package.jsondist/utils-O98BGdnP.cjsdist/analyze-z37DoML5.jsdist/analyze-IM-jyN5x.cjsdist/bundler/index.jsdist/server/index.js

Network endpoints1

output.signals.mastra.ai

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes the deployer entry points and lists build, documentation, test, and lint scripts; no install lifecycle script is declared.
The utility module contains path normalization helpers, with no suspicious behavior in the inspected excerpt.
The analyzer subprocess is used to import and validate a caller-supplied file; its CommonJS and ESM builds show the same behavior.
The bundler installs dependencies into deployment output and generates a lockfile there during bundling.
The Agent Learning proxy is registered only for development with Studio enabled, rejects non-loopback and cross-origin requests, and sends the platform token to the Mastra endpoint.

Evidence against

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

Source & flagged code

7 flagged

dist/utils-O98BGdnP.cjsView file

Lines 1-21javascript

1require("child_process");

2require("fs");

High

Child Process

Package source references child process execution.

dist/utils-O98BGdnP.cjsView on unpkg · L1

3let path = require("path");

4let module$1 = require("module");

5//#region src/build/utils.ts

6/**

7* Get nodeResolve plugin options based on the target platform.

9* For 'browser' platform (e.g., Cloudflare Workers), uses browser-compatible

10* export conditions so packages like the Cloudflare SDK resolve to their

11* web runtime instead of Node.js-specific code.

12*

13* For 'node' and 'neutral' (Bun) platforms, uses Node.js module resolution.

14*/

15function getNodeResolveOptions(platform) {

16 if (platform === "browser") return {

17 preferBuiltins: false,

18 browser: true,

19 exportConditions: [

20 "browser",

21 "worker",

dist/analyze-z37DoML5.jsView file

Lines 322-362javascript

322 import.meta.resolve("@mastra/deployer/loader"),

323 "--input-type=module",

324 "--enable-source-maps",

325 "-e",

326 `${prefixCode};import('${

dist/validator/custom-resolver.cjsView file

Lines 1-21javascript

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

2const require_utils = require("../utils-O98BGdnP.cjs");

3let fs = require("fs");

dist/analyze-IM-jyN5x.cjsView file

4Cross-file remote execution chain: dist/analyze-IM-jyN5x.cjs spawns dist/server/index.js; helper contains network access plus dynamic code execution. L4: const require_bundler = require("./bundler-EFi87w8T.cjs"); L5: let child_process = require("child_process"); L6: let fs = require("fs"); ... L38: * This parses the different stack traces and puts them into one format L39: * This borrows heavily from TraceKit (https://github.com/csnover/TraceKit) L40: */ ... L159: * L160: * @params dir - The directory to start searching from (default: `process.cwd()`) L161: * @params location - The location of the current package (usually the directory containing the package.json) L162: */ ... L260: * @param options - Spawn options L261: * @returns Promise that resolves with the exit code when the process

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/analyze-IM-jyN5x.cjsView on unpkg · L4

dist/bundler/index.jsView file

260} L261: execSync("npm install --package-lock-only --force", { L262: cwd: outputDir,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bundler/index.jsView on unpkg · L260

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

dist/server/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/deployer@1.66.0 matchedIdentity = npm:QG1hc3RyYS9kZXBsb3llcg:1.66.0 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/index.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/utils-O98BGdnP.cjsView file

1require("child_process"); L2: require("fs");

High

Child Process

Package source references child process execution.

dist/utils-O98BGdnP.cjsView on unpkg · L1

dist/analyze-z37DoML5.jsView file

342"#tools", L343: "execa", L344: "effect",

High

Shell

Package source references shell execution.

dist/analyze-z37DoML5.jsView on unpkg · L342

dist/validator/custom-resolver.cjsView file

1Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L2: const require_utils = require("../utils-O98BGdnP.cjs"); L3: let fs = require("fs");

Findings

1 Critical5 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/server/index.js

HighChild Processdist/utils-O98BGdnP.cjs

HighShelldist/analyze-z37DoML5.js

HighCross File Remote Execution Contextdist/analyze-IM-jyN5x.cjs

HighRuntime Package Installdist/bundler/index.js

HighSemantic Analysis Limitedpackage.json

MediumDynamic Requiredist/validator/custom-resolver.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @mastra/deployer@1.63.1.

See all versions of @mastra/deployer for other recorded verdicts.

Review the evidence and your use of @mastra/deployer@1.63.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 06:35:07.984Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code