registry / @mastra/server / 1.79.0
@mastra/server@1.79.0
AI Security Review
scanned 2d ago · by lpm-firewall-aiSource inspection found no install hooks or confirmed credential redirection; the cloud metadata signals refer to protective header and redirect checks. The shell helper is a package-aligned runtime capability, and the inspected source does not establish an attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A caller invokes the server runtime or its exposed command tool.
Impact
The source reviewed does not establish covert credential transfer, cloud metadata access, or install-time mutation.
Mechanism
The command helper runs a command supplied in runtime context; the inspected download code strips sensitive headers and guards redirects.
AI rationale
Source inspection found no install hooks or confirmed credential redirection; the cloud metadata signals refer to protective header and redirect checks. The shell helper is a package-aligned runtime capability, and the inspected source does not establish an attack.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json points to the package’s server entrypoints and declares no install lifecycle hooks.
- The flagged metadata-related code removes metadata and cookie headers and validates download redirects; it does not fetch cloud metadata credentials.
- The shell execution helper receives its command through runtime context, consistent with an exposed server tool rather than an install-time command.
- The bundle’s shell helper takes its command and environment from runtime context; the other requested chunks define typed server schemas for vectors, versions, agents, datasets, builder settings, MCP clients, and processors.
- The seven dist files identify Zod-backed server schema modules, and the dependency context defines an env field for runtime bindings.
- These excerpts show Hono routing and context support, Zod schema handling, module-loader helpers, a permission fallback utility, and generic POST helpers that send the supplied URL, headers, and body.
- These files implement server authentication, response and memory adapters, and tool and observability schema handling; the gateway memory client uses its supplied base URL and API key.
- These targets implement server authentication and session handling, response and memory adapters, and schema utilities; the gateway memory client sends its supplied API key with requests to its configured base URL.
Source & flagged code
6 flagged · loading sourcedist/dist-B-bEVWlJ.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @mastra/server@1.78.0
matchedIdentity = npm:QG1hc3RyYS9zZXJ2ZXI:1.78.0
similarity = 0.467
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/dist-B-bEVWlJ.cjsView on unpkg30let async_hooks = require("async_hooks");
L31: let child_process = require("child_process");
L32: let fs_promises = require("fs/promises");
High
Child Process
Package source references child process execution.
dist/dist-B-bEVWlJ.cjsView on unpkg · L3030let async_hooks = require("async_hooks");
L31: let child_process = require("child_process");
L32: let fs_promises = require("fs/promises");
...
L67: * @return {Number}
L68: * @api private
L69: */
...
L179: for (i in namespace) {
L180: hash = (hash << 5) - hash + namespace.charCodeAt(i);
L181: hash |= 0;
...
L379: } catch (e) {}
L380: if (!r && typeof process !== "undefined" && "env" in process) r = process.env.DEBUG;
L381: return r;
High
Findings
1 Critical5 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/dist-B-bEVWlJ.cjs
HighChild Processdist/dist-B-bEVWlJ.cjs
HighShell
HighCredential Redirect Persistencedist/dist-k77XQGUn.js
HighCloud Metadata Accessdist/dist-B-bEVWlJ.cjs
HighCross File Remote Execution Contextdist/dist-B-bEVWlJ.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/schema-CzbEIyhE-BsMcj9Ws.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @mastra/server@1.79.0.
See all versions of @mastra/server for other recorded verdicts.
- Review the evidence and your use of @mastra/server@1.79.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.