@mastra/e2b@0.15.0

E2B cloud sandbox provider for Mastra workspaces

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The package’s entry point and scripts align with its sandbox-provider purpose, and its dependencies show no concrete attack behavior in the inspected paths. The esbuild postinstall and runtime match are consistent with binary setup and build-error formatting.

Static reason

No blocking static signals were detected.

Trigger

The package is imported, or esbuild runs its postinstall during dependency installation.

Impact

The inspected behavior did not establish unconsented data transfer, harmful mutation, or another attack effect.

Mechanism

The package provides an E2B sandbox adapter. The inspected esbuild installer prepares platform binaries and checks their hashes; the flagged runtime operation formats build errors.

AI rationale

Network endpoints1

registry.npmjs.org

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package entry point is an E2B cloud sandbox provider, and its scripts are for building, testing, and linting; it has no install lifecycle script.
The E2B dependency entry points import API and platform libraries, consistent with the provider’s stated purpose.
The esbuild dependency’s postinstall runs its installer, which checks downloaded platform binaries against recorded SHA-256 hashes.
The flagged esbuild runtime location returns formatted build-error information.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 244 KB of source, external domains: api.github.com, github.com, nodejs.org, packages.cloud.google.com, packages.microsoft.com

Source & flagged code

6 flagged

dist/index.jsView file

Lines 1-25javascript

1import { DirectoryNotEmptyError, DirectoryNotFoundError, FactorySandbox, FileExistsError, FileNotFoundError, IsDirectoryError, MastraFilesystem, MastraSandbox, NotDirectoryError, ProcessHandle, SandboxError, SandboxNotReadyError, SandboxProcessManager, UnsupportedStdinCloseError, assertModesUnsupported } from "@mastra/core/workspace";

2import { ApiClient, ConnectionConfig, InvalidArgumentError, NotFoundError, Sandbox, SandboxNotFoundError, Template } from "e2b";

3import { createHash } from "crypto";

4import { posix } from "path";

5import { Buffer as Buffer$1 } from "buffer";

6import { execFile } from "child_process";

7import { promisify } from "util";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L5

8import { FRAME_PREFIX, buildProgramModule, buildRunner, sanitizeToolId } from "@mastra/core/tools";

9import { transformSync } from "esbuild";

10/**

11* Node.js version installed into the default template — the current LTS at

12* pin time. An exact version rather than an `lts` alias so the template's

13* contents can never drift under a stable identity hash; bump deliberately

14* (each bump builds new templates).

15*/

16const DEFAULT_NODE_VERSION = "24.20.0";

17const NODE_VERSION_PATTERN = /^\d+\.\d+\.\d+$/;

18function isNamedTemplateSpec(spec) {

19 return typeof spec === "object" && spec !== null && "ref" in spec && "template" in spec;

20}

21function isDeferredNamedTemplateSpec(spec) {

22 return typeof spec === "object" && spec !== null && "resolveSpec" in spec && typeof spec.resolveSpec === "function";

23}

24/**

25* Create a base template with FUSE mounting dependencies pre-installed.

package.jsonView file

Lines 1-21json

2 "name": "@mastra/e2b",

3 "version": "0.15.0",

4 "description": "E2B cloud sandbox provider for Mastra workspaces",

5 "type": "module",

.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/1/npm-linux/lib/main.jsView file

1731lines.slice(1).join("\n"), suggestion: "" }; } break; } } } return null; } function failureErrorWithLog(text, errors, warnings)

Low

Ai Review Evidence

The flagged esbuild runtime location returns formatted build-error information.

.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/1/npm-linux/lib/main.jsView on unpkg · L1731

.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/0/npm-linux/package.jsonView file

1{ "name": "e2b", "version": "2.58.0", "description": "E2B SDK that give agents cloud environments", "homepage": "https://e2b.dev/?utm_source=npm&utm_medium=referral&utm_cam

Low

Suspicious Dependency Evidence

The E2B dependency entry points import API and platform libraries, consistent with the provider’s stated purpose.

.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/0/npm-linux/package.jsonView on unpkg · L1

.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/0/npm-linux/dist/index.jsView file

29); platform = __toESM(platform); let compare_versions = require("compare-versions"); let _connectrpc_connect = require("@connectrpc/connect"); let _co

Low

Suspicious Dependency Evidence

The E2B dependency entry points import API and platform libraries, consistent with the provider’s stated purpose.

.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/0/npm-linux/dist/index.jsView on unpkg · L29

Source & flagged code

6 flagged · loading source

dist/index.jsView file

5import { Buffer as Buffer$1 } from "buffer"; L6: import { execFile } from "child_process"; L7: import { promisify } from "util"; ... L68: return { L69: template: Template().fromTemplate("base").aptInstall(aptPackages).runCmd(`sudo rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack && curl -fsSL https://nod... L70: id: `mastra-${hash}`, ... L148: function gitAuthFlag$1(tokenEnv) { L149: return `-c http.extraheader="AUTHORIZATION: basic $(printf 'x-access-token:%s' "$${tokenEnv}" | base64 -w0)"`; L150: } ... L157: * VM. Each builder takes absolute paths and returns one POSIX `sh` script; the L158: * caller runs it with `sh -c` and maps the exit codes below to typed errors. L159: */

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L5

package.jsonView file

1{ "name": "@mastra/e2b", "version": "0.15.0", "description": "E2B cloud sandbox provider for Mastra workspaces", "type": "module", "main": "dist/index

Low

Suspicious Lifecycle Evidence

The package entry point is an E2B cloud sandbox provider, and its scripts are for building, testing, and linting; it has no install lifecycle script.

package.jsonView on unpkg · L1

Findings

2 Medium10 Low

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidence.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/1/npm-linux/lib/main.js

LowSuspicious Dependency Evidence.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/0/npm-linux/package.json

LowSuspicious Dependency Evidence.lpm-dependency-evidence-f8a8cd59-e0fc-4e65-ac6c-f8703c77c576/0/npm-linux/dist/index.js

Affected versions and remediation

This report applies to @mastra/e2b@0.15.0.

See all versions of @mastra/e2b for other recorded verdicts.

Review the evidence and your use of @mastra/e2b@0.15.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 11:57:01.422Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @mastra

Behavioral surface

Related packages

More from @mastra

Source & flagged code