@mastra/server@1.63.2
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe inspected source supports a warning for a caller-invoked helper that runs a remote project generator. The credential matches resolve to provider-aligned requests and do not establish unrelated credential disclosure.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A caller invokes the project creation helper.
Impact
The invoked package manager can install and execute the project generator in the caller's environment.
Mechanism
The helper runs `pnpx create-mastra@latest` as a child process, passing a sanitized project name and optional features.
AI rationale
The inspected source supports a warning for a caller-invoked helper that runs a remote project generator. The credential matches resolve to provider-aligned requests and do not establish unrelated credential disclosure.
Evidence
dist/dist-DmVdNrSg.js
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest lists build, generation, check, test, and lint scripts; it does not show an install lifecycle hook.
- The project creation helper invokes `pnpx create-mastra@latest` with a project name after removing several shell metacharacters.
- A shared helper runs child processes with inherited standard I/O.
- The inspected provider code uses provider-specific credentials for token estimation, and the gateway default points to Vercel AI Gateway.
Evidence against
- The inspected process execution is part of an explicit project creation helper, not an install-time action.
- The inspected credential paths do not establish transfer to an unrelated recipient.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
6 flagged · loading sourcedist/dist-fQ5zEP_z.cjsView file
30let async_hooks = require("async_hooks");
L31: let child_process = require("child_process");
L32: let fs_promises = require("fs/promises");
High
Child Process
Package source references child process execution.
dist/dist-fQ5zEP_z.cjsView on unpkg · L30dist/schema-Bv9OdW1f-CxTiW8RD.cjsView file
3778if (this.opts.code.process) sourceCode = this.opts.code.process(sourceCode, sch);
L3779: const validate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode)(this, this.scope.get());
L3780: this.scope.value(validateName, { ref: validate });
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/schema-Bv9OdW1f-CxTiW8RD.cjsView on unpkg · L3778dist/dist-DmVdNrSg.jsView file
Findings
1 Critical5 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/dist-DmVdNrSg.js
HighChild Processdist/dist-fQ5zEP_z.cjs
HighShell
HighCredential Redirect Persistencedist/dist-DmVdNrSg.js
HighCross File Remote Execution Contextdist/dist-DmVdNrSg.js
HighSemantic Analysis Limiteddist/sync-BG15Yae1.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEvaldist/schema-Bv9OdW1f-CxTiW8RD.cjs
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/server@1.63.2.
See all versions of @mastra/server for other recorded verdicts.
- Review the evidence and your use of @mastra/server@1.63.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.