registry / @radhya/mach / 2.0.30

@radhya/mach@2.0.30

Mach CLI: Cloud Build Orchestrator for React Native & Expo

AI Security Review

scanned 2d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit agent installation creates a first-party background device-discovery service. It persists only after a user invokes the agent install command and exposes local endpoints on 127.0.0.1:7070.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `mach agent install`.

Impact

Creates login/background persistence and a local device-install control surface.

Mechanism

First-party OS service registration for a local CLI agent.

Rationale

Source inspection does not support a malicious install-time or covert execution verdict. The explicit cross-platform agent persistence is a real first-party extension lifecycle risk and merits a warning under the stated policy.

Evidence

package.jsonREADME.mddist/index.jsdist/chunk-S64YFTRR.js~/Library/LaunchAgents/com.radhya.mach.agent.plist~/.config/systemd/user/com.radhya.mach.agent.service~/.mach/agent.cmd~/.mach/agent.log~/.mach/agent.error.log

Network endpoints3

127.0.0.1:7070mach-api.securejs.ingetmach.dev

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/index.js` implements `mach agent install` persistence.
Agent install writes macOS LaunchAgent, systemd, or Windows task definitions.
The persisted agent runs the package CLI as `agent run` and listens on localhost port 7070.
CLI handles user-supplied build credentials, environment files, SSH, and cloud API requests.

Evidence against

`package.json` has no preinstall, install, or postinstall hook.
Persistence is behind the explicit `mach agent install` command.
`README.md` documents agent start/install/uninstall and localhost-only use.
No source evidence of credential harvesting or unrelated outbound exfiltration was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 412 KB of source, external domains: 127.0.0.1, 169.254.169.254, api.appstoreconnect.apple.com, app.example.com, appstoreconnect.apple.com, deb.nodesource.com, developer.android.com, developer.apple.com, dl.google.com, example.com, getmach.dev, github.com, mach-api.securejs.in, www.apple.com, www.sitemaps.org

Source & flagged code

9 flagged

dist/index.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2import{a as Ht,b as nn,c as oo,d as Rt,e as _e,f as ke,g as so,h as ao,i as jt,j as lo,l as rn}from"./chunk-6LOQKG2J.js";import{a as m,b as no,c as Ce,d as io,e as ro,f as Bt,g as nt,h as T}from"./chunk-S64YFTRR.js";import{Command as og,Option as Ke}from"commander";import{configDotenv as sg}from"dotenv";import{intro as we,outro as jl}from"@clack/prompts";import be from"chalk";import{text as co,confirm as zl,spinner as Wl,isCancel as Ti,cancel as on,note as Jl,outro as Yl}from"@clack/prompts";import sn from"chalk";async function uo(){try{let e=await co({message:"Enter Bucket Name:",placeholder: ...

3`;s+=`Region: ${sn.cyan(o.region)}

4`,s+=`S3 Website URL: ${sn.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`

6CloudFront ID: ${sn.cyan(o.cloudFrontId)}`,s+=`

7CloudFront URL: ${sn.blue(o.cloudFrontUrl)}`),Jl(s,"Setup Complete!"),Yl("You are all set!")}catch(r){i.stop("Setup failed"),on(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){on(`An unexpected error occurred: ${e.message}`)}}import{readdir as ql,writeFile as Xl,access as Zl,mkdir as Ql}from"fs/promises";import{join as po}from"path";import{spinner as ec,text as fo,isCancel as mo,cancel as xi,note as tc,outro as nc}from"@clack/prompts";import ic from"chalk";async function rc(){let e=["./app","./src/app"];for(let t of e)try{return await Zl(t),t}catch{}return null}async function go( ...

8${s.map(u=>` \u2022 ${u.path}`).join(`

9`)}`,"Sitemap Summary"),nc(`Sitemap saved to ${ic.cyan(a)}`)}catch(t){xi(`An error occurred: ${t.message}`)}}async function ho(e,t=""){let n=[];try{let i=await ql(e,{withFileTypes:!0});for(let r of i){let o=po(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."

10<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

11${e.map(r=>{let o=r.path;return o=o.replace(/\/$[^)]+$/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g

12 <loc>${t}${o}</loc>

13 <lastmod>${n}</lastmod>

14 <changefreq>weekly</changefreq>

15 <priority>0.8</priority>

16 </url>`}).join(`

17`)}

18</urlset>`}import{randomUUID as zu}from"crypto";import he from"path";import zn from"axios";import Wu from"os";import{spinner as Sr,select as Rs,confirm as Ds,isCancel as Wn,cancel as Ps,log as R}from"@clack/prompts";import P from"chalk";import ue from"fs";import{execSync as Os}from"child_process";import Cs from"adm-zip";import{spinner as mc,log as Tn}from"@clack/prompts";import bo from"chalk";import Ao from"fs";import Eo from"path";var yo=`#!/bin/bash

19# --- Mach Cloud Build Script (Android) ---

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L17

20# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.

21BUILD_ID="{{BUILD_ID}}"

23# --- System Setup ---

24exec > >(tee /var/log/user-data.log | cat) 2>&1

25export PYTHONUNBUFFERED=1

26export GRADLE_OPTS="-Dorg.gradle.console=plain"

27echo "Starting build setup..."

29# Forward environment variables (includes PRESIGNED_* URLs + project secrets)

30{{ENV_VARS}}

31export HUSKY=0

32export CI=true

33export npm_config_engine_strict=false

34export npm_config_ignore_engines=true

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L17

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

35export YARN_IGNORE_ENGINES=1

37# Check if this is a Pre-Warmed Mach AMI

Long lines were clipped for display.

Lines 603-643javascript

603post_install do |installer|

604${F}

605end

606`;xe.appendFileSync($,O)}let D="/opt/homebrew/bin/pod",I=xe.existsSync(D)?D:"pod",N=d(w);xe.existsSync(Gt.join(w,"Pods"))&&i.pods&&i.pods!==N&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods

607`),Ne.info(Te.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),xe.rmSync(Gt.join(w,"Pods"),{recursive:!0,force:!0})),Ne.info(Te.dim(`Using pod command: ${I} in ${w}`)),await l(I,["install"],w,b),i.pods=N,u(r,i)}catch(w){let $=w.message||"Unknown error";Ne.warn(Te.yellow(`Native "pod"

Lines 1409-1449javascript

1409`)}),i}async function Zo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...

1410`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.

1411`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Md(e,t){let n=us(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...

1412`),ft("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.

1413`)}function Ud(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...

1414`),e.platform==="ios"){let r=ft("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.

Lines 1513-1553javascript

1513 <key>Label</key>

1514 ${mn(Yt)}

1515 <key>ProgramArguments</key>

1516 <array>

1517${o}

1518 </array>

1519 <key>EnvironmentVariables</key>

1520 <dict>

1521${r}

dist/chunk-6LOQKG2J.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = Manual U...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunk-6LOQKG2J.js

dist/chunk-6LOQKG2J.jsView on unpkg · L37

Source & flagged code

9 flagged · loading source

dist/index.jsView file

1429patternName = private_key_rsa severity = critical line = 1429 matchedText = `):n||e....----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.jsView on unpkg · L1429

17`)} L18: </urlset>`}import{randomUUID as zu}from"crypto";import he from"path";import zn from"axios";import Wu from"os";import{spinner as Sr,select as Rs,confirm as Ds,isCancel as Wn,cancel ... L19: # --- Mach Cloud Build Script (Android) --- ... L32: export CI=true L33: export npm[redacted]=false L34: export npm[redacted]=true

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L17

623Trigger-reachable chain: manifest.main -> dist/index.js L623: `),Dt.info(Pt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0})):$&&ac(y,w)&&(await s(`[CACHE] React Native... L624: `),Dt.info(Pt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",E=st.exists... L625: `):"",f;if(r){let b=Eo.isAbsolute(r)?r:Eo.resolve(process.cwd(),r);Ao.existsSync(b)?(f=Ao.readFileSync(b,"utf-8"),Tn.info(bo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Tn.warn(... ... L631: {{ENV_VARS}} L632: `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace(... L633: # --- Mach Cloud Build Script (iOS) ---

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L623

1429patternName = private_key_rsa severity = critical line = 1429 matchedText = `):n||e....----

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L1429

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L17

623`),Dt.info(Pt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0})):$&&ac(y,w)&&(await s(`[CACHE] React Native... L624: `),Dt.info(Pt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",E=st.exists... L625: `):"",f;if(r){let b=Eo.isAbsolute(r)?r:Eo.resolve(process.cwd(),r);Ao.existsSync(b)?(f=Ao.readFileSync(b,"utf-8"),Tn.info(bo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Tn.warn(... ... L631: {{ENV_VARS}} L632: `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace(... L633: # --- Mach Cloud Build Script (iOS) ---

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L623

1#!/usr/bin/env node L2: import{a as Ht,b as nn,c as oo,d as Rt,e as _e,f as ke,g as so,h as ao,i as jt,j as lo,l as rn}from"./chunk-6LOQKG2J.js";import{a as m,b as no,c as Ce,d as io,e as ro,f as Bt,g as ... L3: `;s+=`Region: ${sn.cyan(o.region)} ... L6: CloudFront ID: ${sn.cyan(o.cloudFrontId)}`,s+=` L7: CloudFront URL: ${sn.blue(o.cloudFrontUrl)}`),Jl(s,"Setup Complete!"),Yl("You are all set!")}catch(r){i.stop("Setup failed"),on(`Error: ${r.response?.data?.message||r.message}`)}... L8: ${s.map(u=>` \u2022 ${u.path}`).join(` ... L17: `)} L18: </urlset>`}import{randomUUID as zu}from"crypto";import he from"path";import zn from"axios";import Wu from"os";import{spinner as Sr,select as Rs,confirm as Ds,isCancel as Wn,cancel ... L19: # --- Mach Cloud Build Script (Android) --- ... L32: export CI=true L33: export npm[redacted]=false L34: export npm[redacted]=true

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

1533patternName = generic_password severity = medium line = 1533 matchedText = `).filte...in(`

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L1533

dist/chunk-6LOQKG2J.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = Manual U...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunk-6LOQKG2J.js

dist/chunk-6LOQKG2J.jsView on unpkg · L37

Findings

4 Critical2 High6 Medium5 Low

CriticalCritical Secretdist/index.js

CriticalSame File Env Network Executiondist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

CriticalSecret Patterndist/index.js

HighChild Processdist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/index.js

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/index.js

MediumSecret Patterndist/chunk-6LOQKG2J.js

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/index.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

3`;s+=`Region: ${sn.cyan(o.region)}

4`,s+=`S3 Website URL: ${sn.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`

6CloudFront ID: ${sn.cyan(o.cloudFrontId)}`,s+=`

8${s.map(u=>` \u2022 ${u.path}`).join(`

10<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

11${e.map(r=>{let o=r.path;return o=o.replace(/\/$[^)]+$/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g

12 <loc>${t}${o}</loc>

13 <lastmod>${n}</lastmod>

14 <changefreq>weekly</changefreq>

15 <priority>0.8</priority>

16 </url>`}).join(`

17`)}

19# --- Mach Cloud Build Script (Android) ---

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L17

20# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.

21BUILD_ID="{{BUILD_ID}}"

23# --- System Setup ---

24exec > >(tee /var/log/user-data.log | cat) 2>&1

25export PYTHONUNBUFFERED=1

26export GRADLE_OPTS="-Dorg.gradle.console=plain"

27echo "Starting build setup..."

29# Forward environment variables (includes PRESIGNED_* URLs + project secrets)

30{{ENV_VARS}}

31export HUSKY=0

32export CI=true

33export npm_config_engine_strict=false

34export npm_config_ignore_engines=true

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L17

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

35export YARN_IGNORE_ENGINES=1

37# Check if this is a Pre-Warmed Mach AMI

Long lines were clipped for display.

Lines 603-643javascript

603post_install do |installer|

604${F}

605end

Lines 1409-1449javascript

1409`)}),i}async function Zo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...

1410`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.

1411`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Md(e,t){let n=us(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...

1412`),ft("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.

1413`)}function Ud(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...

1414`),e.platform==="ios"){let r=ft("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.

Lines 1513-1553javascript

1513 <key>Label</key>

1514 ${mn(Yt)}

1515 <key>ProgramArguments</key>

1516 <array>

1517${o}

1518 </array>

1519 <key>EnvironmentVariables</key>

1520 <dict>

1521${r}

dist/chunk-6LOQKG2J.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = Manual U...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunk-6LOQKG2J.js

dist/chunk-6LOQKG2J.jsView on unpkg · L37