registry / @mastra/deployer / 1.69.0

@mastra/deployer@1.69.0

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the flagged process and network behavior is attributable to invoked build, deployment, or local development-server functions. Source inspection found no concrete attack behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A consumer invokes build or deployment analysis, or starts the development server with Studio enabled and requests the local Agent Learning route.

Impact

No unconsented installation action, credential collection, or unrelated data transfer was established.

Mechanism

The analyzer imports the requested project file; deployment shell arguments are checked before execution. The development proxy forwards platform credentials to the configured endpoint, defaulting to Mastra’s endpoint, and accepts requests only on loopback.

AI rationale

Evidence

package.jsondist/analyze-CcnwZxfN.cjsdist/services-m8tlZVRv.cjsdist/server/index.js

Network endpoints1

output.signals.mastra.ai

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json lists build, test, and lint scripts, with no install lifecycle hook.
The analyzer launches Node to import the file being validated, consistent with an explicitly invoked build-analysis operation.
The deployment helper rejects shell arguments outside its safe-character allowlist before spawning a process.
The helper copies only selected workspace settings and validates build-approval entries before writing a generated workspace file.
The Agent Learning proxy is registered only in development with Studio enabled, rejects non-loopback requests, and uses platform credentials with a Mastra endpoint by default.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

6 flagged

dist/analyze-CcnwZxfN.cjsView file

Lines 1-36javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-Bsr_sEcH.cjs");

3const require_services = require("./services-m8tlZVRv.cjs");

4const require_bundler = require("./bundler-CjoP35xh.cjs");

5let fs = require("fs");

6let fs_promises = require("fs/promises");

7let path = require("path");

8path = require_rolldown_runtime.__toESM(path, 1);

9let _mastra_core_error = require("@mastra/core/error");

10let _rollup_plugin_virtual = require("@rollup/plugin-virtual");

11_rollup_plugin_virtual = require_rolldown_runtime.__toESM(_rollup_plugin_virtual, 1);

12let empathic_package = require("empathic/package");

13empathic_package = require_rolldown_runtime.__toESM(empathic_package, 1);

14let _babel_core = require("@babel/core");

15let find_workspaces = require("find-workspaces");

16let fs_extra = require("fs-extra");

17let child_process = require("child_process");

18let url = require("url");

High

Child Process

Package source references child process execution.

dist/analyze-CcnwZxfN.cjsView on unpkg · L16

19let _rollup_plugin_commonjs = require("@rollup/plugin-commonjs");

20_rollup_plugin_commonjs = require_rolldown_runtime.__toESM(_rollup_plugin_commonjs, 1);

21let _rollup_plugin_json = require("@rollup/plugin-json");

22_rollup_plugin_json = require_rolldown_runtime.__toESM(_rollup_plugin_json, 1);

23let local_pkg = require("local-pkg");

24let rollup = require("rollup");

25let _optimize_lodash_rollup_plugin = require("@optimize-lodash/rollup-plugin");

26let _rollup_plugin_node_resolve = require("@rollup/plugin-node-resolve");

27_rollup_plugin_node_resolve = require_rolldown_runtime.__toESM(_rollup_plugin_node_resolve, 1);

28let resolve_exports = require("resolve.exports");

29resolve_exports = require_rolldown_runtime.__toESM(resolve_exports, 1);

30let path_posix = require("path/posix");

31//#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/stacktrace-parser/0.1.11/63406bc765474556691ebd1b24eaa0c5b032f058a26bbaff13797a2780d98220/node_modules/stacktrace-parser/dist/stack-trace-parser.cjs.js

32var require_stack_trace_parser_cjs = /* @__PURE__ */ require_rolldown_runtime.__commonJSMin(((exports) => {

33 Object.defineProperty(exports, "__esModule", { value: true });

34 var UNKNOWN_FUNCTION = "<unknown>";

35 /**

36 * This parses the different stack traces and puts them into one format

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/analyze-CcnwZxfN.cjsView on unpkg · L16

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/deployer@1.66.0 matchedIdentity = npm:QG1hc3RyYS9kZXBsb3llcg:1.66.0 similarity = 0.603 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/analyze-CcnwZxfN.cjsView on unpkg

dist/services-m8tlZVRv.cjsView file

Lines 7-47javascript

7path = require_rolldown_runtime.__toESM(path, 1);

8let _mastra_core_error = require("@mastra/core/error");

9let fs_extra_esm = require("fs-extra/esm");

10fs_extra_esm

dist/bundler-CjoP35xh.cjsView file

Lines 1-21javascript

1const require_rolldown_runtime = require("./rolldown-runtime-emK7D4bc.cjs");

2const require_utils = require("./utils-Bsr_sEcH.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundler-CjoP35xh.cjsView on unpkg · L1

package.jsonView file

Lines 138-166json

138 "@mastra/core": "1.69.0",

139 "@mastra/hono": "1.7.11",

140 "@mastra/mcp": "^2.0.0",

141 "@mastra/server": "1.69.0"

142 },

143

Source & flagged code

6 flagged · loading source

dist/analyze-CcnwZxfN.cjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/analyze-CcnwZxfN.cjsView on unpkg

16let fs_extra = require("fs-extra"); L17: let child_process = require("child_process"); L18: let url = require("url");

High

Child Process

Package source references child process execution.

dist/analyze-CcnwZxfN.cjsView on unpkg · L16

16Cross-file remote execution chain: dist/analyze-CcnwZxfN.cjs spawns dist/server/index.js; helper contains network access plus dynamic code execution. L16: let fs_extra = require("fs-extra"); L17: let child_process = require("child_process"); L18: let url = require("url"); ... L36: * This parses the different stack traces and puts them into one format L37: * This borrows heavily from TraceKit (https://github.com/csnover/TraceKit) L38: */ ... L139: * L140: * @params dir - The directory to start searching from (default: `process.cwd()`) L141: * @params location - The location of the current package (usually the directory containing the package.json) L142: */ ... L242: * @param options - Spawn options L243: * @returns Promise that resolves with the exit code when the process completes

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/analyze-CcnwZxfN.cjs

HighChild Processdist/analyze-CcnwZxfN.cjs

HighShelldist/services-m8tlZVRv.cjs

HighCross File Remote Execution Contextdist/analyze-CcnwZxfN.cjs

MediumDynamic Requiredist/bundler-CjoP35xh.cjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @mastra/deployer@1.69.0.

See all versions of @mastra/deployer for other recorded verdicts.

Review the evidence and your use of @mastra/deployer@1.69.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 06:36:55.100Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code