registry / @mastra/server / 1.60.0

@mastra/server@1.60.0

⚠ Under review

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 260 file(s), 8.44 MB of source, external domains: ai-gateway.vercel.sh, api.anthropic.com, api.duckduckgo.com, api.groq.com, api.open-meteo.com, api.openai.com, api.x.ai, datatracker.ietf.org, ecma-international.org, example.com, gateway-api.mastra.ai, generativelanguage.googleapis.com, geocoding-api.open-meteo.com, git.io, github.com, json-schema.org, lodash.com, mastra.ai, mths.be, openjsf.org, raw.githubusercontent.com, skills-api-production.up.railway.app, underscorejs.org, vercel.com, www.w3.org

Source & flagged code

7 flagged

dist/dist-DERatX43.cjsView file

30let async_hooks = require("async_hooks"); L31: let child_process = require("child_process"); L32: let fs_promises = require("fs/promises");

High

Child Process

Package source references child process execution.

dist/dist-DERatX43.cjsView on unpkg · L30

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/dist-DERatX43.cjs: throw new Error("@vercel/oidc is not available in the vendored @internal AI packages. Provide an API key instead."); if (apiKeyProvided) contextualMessage = `AI Gateway authentication failed: Invalid API key. Create a new API key: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%2Fapi-keys Alternatively, use an API key: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%2Fapi-keys`; Option 1 - API key: Create an API key: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%2Fapi-keys url: `${this.config.baseURL}/config`, url: `${new URL(this.config.baseURL).origin}/v1/credits`,

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/dist-DERatX43.cjsView on unpkg

30Cross-file remote execution chain: dist/dist-DERatX43.cjs spawns dist/schema-Bv9OdW1f-CxTiW8RD.cjs; helper contains network access plus dynamic code execution. L30: let async_hooks = require("async_hooks"); L31: let child_process = require("child_process"); L32: let fs_promises = require("fs/promises"); ... L711: } L712: fetch(e, t = {}) { L713: let i = W.hasSubscribers, { status: s = R() ? {} : void 0 } = t; ... L4887: if (hasBuffer && Buffer.isBuffer(text)) text = text.toString(); L4888: if (text && text.charCodeAt(0) === 65279) text = text.slice(1); L4889: const obj = JSON.parse(text, reviver); ... L6592: type: "redacted_reasoning", L6593: value: { data: value.data } L6594: };

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/dist-DERatX43.cjsView on unpkg · L30

dist/schema-Bv9OdW1f-CxTiW8RD.cjsView file

Lines 3758-3798javascript

3758 } : { ref: sch.schema }),

3759 validateName,

3760 ValidationError: _ValidationError,

3761 schema: sch.schema,

3762 schemaEnv: sch,

3763 rootId,

3764 baseId: sch.baseId || rootId,

dist/observability-new-endpoints-gRCFhnRr.cjsView file

Lines 1-21javascript

1const require_http_exception = require("./http-exception-CKDHupKw.cjs");

2const require_route_builder = require("./route-builder-CWsok5ci.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/observability-new-endpoints-gRCFhnRr.cjsView on unpkg · L1

dist/dist-Cw-T1gX6.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @mastra/server@1.59.0 matchedIdentity = npm:QG1hc3RyYS9zZXJ2ZXI:1.59.0 similarity = 0.575 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/dist-Cw-T1gX6.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/dist-Cw-T1gX6.js: import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs"; import { copyFile, mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from "fs/promises"; //#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/async-mutex/0.5.[redacted]node_modules/async-mutex/... //#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/lru-cache/11.5.[redacted]node_modules/lru-cache/dis... //#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/xxhash-wasm/1.1.[redacted]node_modules/xxhash-wasm/... //#region ../../../../../setup-pnpm/node_modules/.bin/store/v11/links/@/tok

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/dist-Cw-T1gX6.jsView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code