registry / @radhya/mach / 2.0.31

@radhya/mach@2.0.31

Mach CLI: Cloud Build Orchestrator for React Native & Expo

AI Security Review

scanned 2d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit CLI use can install a per-user Mach background agent. Cloud-build commands send project build inputs and generated artifacts to the package's configured Mach service or supplied presigned URLs; no install-time attack surface is confirmed.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `mach agent install` or invokes cloud build/upload commands.

Impact

Creates a user-level persistent service when explicitly requested; build workflows can transmit selected project artifacts and logs to configured build endpoints.

Mechanism

User-invoked local service registration and authenticated cloud-build artifact transfer.

Rationale

No concrete malicious install-time behavior, credential theft, or foreign AI-agent control-surface mutation was found. The explicit background-agent lifecycle warrants a warning under the package policy.

Evidence

package.jsondist/index.jsdist/chunk-S64YFTRR.jsexpo-plugin/index.js~/.mach/credentials.json~/.mach/agent.log~/.mach/agent.error.log

Network endpoints4

mach-api.securejs.ingetmach.dev169.254.169.254/latest/meta-data/instance-id169.254.169.254/latest/meta-data/spot/termination-time

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/index.js` exposes explicit `mach agent install` background-service setup.
Agent installation writes per-user macOS/Linux/Windows service definitions and invokes `launchctl`, `systemctl --user`, or `schtasks.exe`.
`dist/index.js` includes cloud-build scripts that upload logs/artifacts through presigned URLs.
`dist/chunk-S64YFTRR.js` sends authenticated CLI requests to `https://mach-api.securejs.in`.

Evidence against

`package.json` has no preinstall, install, postinstall, or prepare lifecycle hook.
The persistence behavior is reached through the user-invoked `agent` command, not installation or import.
The agent is described as a local Install Hub discovery service on port 7070.
No AI-agent configuration/control-surface paths or credential-harvesting-and-exfiltration chain was confirmed.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 413 KB of source, external domains: 127.0.0.1, 169.254.169.254, api.appstoreconnect.apple.com, app.example.com, appstoreconnect.apple.com, deb.nodesource.com, developer.android.com, developer.apple.com, dl.google.com, example.com, getmach.dev, github.com, mach-api.securejs.in, www.apple.com, www.sitemaps.org

Source & flagged code

9 flagged

dist/index.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2import{a as Ht,b as rn,c as ao,d as Rt,e as _e,f as ke,g as lo,h as co,i as jt,j as uo,l as on}from"./chunk-6LOQKG2J.js";import{a as m,b as ro,c as Ce,d as oo,e as so,f as Bt,g as nt,h as T}from"./chunk-S64YFTRR.js";import{Command as dg,Option as Ke}from"commander";import{configDotenv as cg}from"dotenv";import{intro as we,outro as Kl}from"@clack/prompts";import be from"chalk";import{text as po,confirm as Jl,spinner as Yl,isCancel as xi,cancel as sn,note as ql,outro as Xl}from"@clack/prompts";import an from"chalk";async function fo(){try{let e=await po({message:"Enter Bucket Name:",placeholder: ...

3`;s+=`Region: ${an.cyan(o.region)}

4`,s+=`S3 Website URL: ${an.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`

6CloudFront ID: ${an.cyan(o.cloudFrontId)}`,s+=`

7CloudFront URL: ${an.blue(o.cloudFrontUrl)}`),ql(s,"Setup Complete!"),Xl("You are all set!")}catch(r){i.stop("Setup failed"),sn(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){sn(`An unexpected error occurred: ${e.message}`)}}import{readdir as Zl,writeFile as Ql,access as ed,mkdir as td}from"fs/promises";import{join as mo}from"path";import{spinner as nd,text as go,isCancel as ho,cancel as Li,note as id,outro as rd}from"@clack/prompts";import od from"chalk";async function sd(){let e=["./app","./src/app"];for(let t of e)try{return await ed(t),t}catch{}return null}async function yo( ...

8${s.map(u=>` \u2022 ${u.path}`).join(`

9`)}`,"Sitemap Summary"),rd(`Sitemap saved to ${od.cyan(a)}`)}catch(t){Li(`An error occurred: ${t.message}`)}}async function So(e,t=""){let n=[];try{let i=await Zl(e,{withFileTypes:!0});for(let r of i){let o=mo(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."

10<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

11${e.map(r=>{let o=r.path;return o=o.replace(/\/$[^)]+$/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g

12 <loc>${t}${o}</loc>

13 <lastmod>${n}</lastmod>

14 <changefreq>weekly</changefreq>

15 <priority>0.8</priority>

16 </url>`}).join(`

17`)}

18</urlset>`}import{randomUUID as Ju}from"crypto";import he from"path";import Jn from"axios";import Yu from"os";import{spinner as br,select as Ps,confirm as Os,isCancel as Yn,cancel as Cs,log as R}from"@clack/prompts";import P from"chalk";import ue from"fs";import{execSync as ks}from"child_process";import Ns from"adm-zip";import{spinner as hd,log as Ln}from"@clack/prompts";import Eo from"chalk";import Io from"fs";import wo from"path";var bo=`#!/bin/bash

19# --- Mach Cloud Build Script (Android) ---

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L17

20# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.

21BUILD_ID="{{BUILD_ID}}"

23# --- System Setup ---

24exec > >(tee /var/log/user-data.log | cat) 2>&1

25export PYTHONUNBUFFERED=1

26export GRADLE_OPTS="-Dorg.gradle.console=plain"

27echo "Starting build setup..."

29# Forward environment variables (includes PRESIGNED_* URLs + project secrets)

30{{ENV_VARS}}

31export HUSKY=0

32export CI=true

33export npm_config_engine_strict=false

34export npm_config_ignore_engines=true

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L17

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

35export YARN_IGNORE_ENGINES=1

37# Check if this is a Pre-Warmed Mach AMI

Long lines were clipped for display.

Lines 603-643javascript

603post_install do |installer|

604${F}

605end

606`;xe.appendFileSync(_,O)}let D="/opt/homebrew/bin/pod",w=xe.existsSync(D)?D:"pod",N=c(E);xe.existsSync(Gt.join(E,"Pods"))&&i.pods&&i.pods!==N&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods

607`),Ne.info(Te.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),xe.rmSync(Gt.join(E,"Pods"),{recursive:!0,force:!0})),Ne.info(Te.dim(`Using pod command: ${w} in ${E}`)),await l(w,["install"],E,b),i.pods=N,u(r,i)}catch(E){let _=E.message||"Unknown error";Ne.warn(Te.yellow(`Native "pod"

Lines 1409-1449javascript

1409`)}),i}async function es(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...

1410`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.

1411`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Fc(e,t){let n=fs(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...

1412`),ft("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.

1413`)}function Bc(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...

1414`),e.platform==="ios"){let r=ft("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.

Lines 1513-1553javascript

1513 <key>Label</key>

1514 ${gn(Yt)}

1515 <key>ProgramArguments</key>

1516 <array>

1517${o}

1518 </array>

1519 <key>EnvironmentVariables</key>

1520 <dict>

1521${r}

dist/chunk-6LOQKG2J.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = Manual U...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunk-6LOQKG2J.js

dist/chunk-6LOQKG2J.jsView on unpkg · L37

Source & flagged code

9 flagged · loading source

dist/index.jsView file

1429patternName = private_key_rsa severity = critical line = 1429 matchedText = `):n||e....----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.jsView on unpkg · L1429

17`)} L18: </urlset>`}import{randomUUID as Ju}from"crypto";import he from"path";import Jn from"axios";import Yu from"os";import{spinner as br,select as Ps,confirm as Os,isCancel as Yn,cancel ... L19: # --- Mach Cloud Build Script (Android) --- ... L32: export CI=true L33: export npm[redacted]=false L34: export npm[redacted]=true

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L17

623Trigger-reachable chain: manifest.main -> dist/index.js L623: `),Dt.info(Pt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0})):_&&dd(y,E)&&(await s(`[CACHE] React Native... L624: `),Dt.info(Pt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",I=st.exists... L625: `):"",f;if(r){let b=wo.isAbsolute(r)?r:wo.resolve(process.cwd(),r);Io.existsSync(b)?(f=Io.readFileSync(b,"utf-8"),Ln.info(Eo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Ln.warn(... ... L631: {{ENV_VARS}} L632: `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace(... L633: # --- Mach Cloud Build Script (iOS) ---

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L623

1429patternName = private_key_rsa severity = critical line = 1429 matchedText = `):n||e....----

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L1429

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L17

623`),Dt.info(Pt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0})):_&&dd(y,E)&&(await s(`[CACHE] React Native... L624: `),Dt.info(Pt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",I=st.exists... L625: `):"",f;if(r){let b=wo.isAbsolute(r)?r:wo.resolve(process.cwd(),r);Io.existsSync(b)?(f=Io.readFileSync(b,"utf-8"),Ln.info(Eo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Ln.warn(... ... L631: {{ENV_VARS}} L632: `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace(... L633: # --- Mach Cloud Build Script (iOS) ---

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L623

1#!/usr/bin/env node L2: import{a as Ht,b as rn,c as ao,d as Rt,e as _e,f as ke,g as lo,h as co,i as jt,j as uo,l as on}from"./chunk-6LOQKG2J.js";import{a as m,b as ro,c as Ce,d as oo,e as so,f as Bt,g as ... L3: `;s+=`Region: ${an.cyan(o.region)} ... L6: CloudFront ID: ${an.cyan(o.cloudFrontId)}`,s+=` L7: CloudFront URL: ${an.blue(o.cloudFrontUrl)}`),ql(s,"Setup Complete!"),Xl("You are all set!")}catch(r){i.stop("Setup failed"),sn(`Error: ${r.response?.data?.message||r.message}`)}... L8: ${s.map(u=>` \u2022 ${u.path}`).join(` ... L17: `)} L18: </urlset>`}import{randomUUID as Ju}from"crypto";import he from"path";import Jn from"axios";import Yu from"os";import{spinner as br,select as Ps,confirm as Os,isCancel as Yn,cancel ... L19: # --- Mach Cloud Build Script (Android) --- ... L32: export CI=true L33: export npm[redacted]=false L34: export npm[redacted]=true

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

1533patternName = generic_password severity = medium line = 1533 matchedText = `).filte...in(`

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L1533

dist/chunk-6LOQKG2J.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = Manual U...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunk-6LOQKG2J.js

dist/chunk-6LOQKG2J.jsView on unpkg · L37

Findings

4 Critical2 High6 Medium5 Low

CriticalCritical Secretdist/index.js

CriticalSame File Env Network Executiondist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

CriticalSecret Patterndist/index.js

HighChild Processdist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/index.js

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/index.js

MediumSecret Patterndist/chunk-6LOQKG2J.js

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/index.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

3`;s+=`Region: ${an.cyan(o.region)}

4`,s+=`S3 Website URL: ${an.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`

6CloudFront ID: ${an.cyan(o.cloudFrontId)}`,s+=`

8${s.map(u=>` \u2022 ${u.path}`).join(`

10<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

11${e.map(r=>{let o=r.path;return o=o.replace(/\/$[^)]+$/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g

12 <loc>${t}${o}</loc>

13 <lastmod>${n}</lastmod>

14 <changefreq>weekly</changefreq>

15 <priority>0.8</priority>

16 </url>`}).join(`

17`)}

19# --- Mach Cloud Build Script (Android) ---

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L17

20# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.

21BUILD_ID="{{BUILD_ID}}"

23# --- System Setup ---

24exec > >(tee /var/log/user-data.log | cat) 2>&1

25export PYTHONUNBUFFERED=1

26export GRADLE_OPTS="-Dorg.gradle.console=plain"

27echo "Starting build setup..."

29# Forward environment variables (includes PRESIGNED_* URLs + project secrets)

30{{ENV_VARS}}

31export HUSKY=0

32export CI=true

33export npm_config_engine_strict=false

34export npm_config_ignore_engines=true

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/index.jsView on unpkg · L17

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1

35export YARN_IGNORE_ENGINES=1

37# Check if this is a Pre-Warmed Mach AMI

Long lines were clipped for display.

Lines 603-643javascript

603post_install do |installer|

604${F}

605end

Lines 1409-1449javascript

1409`)}),i}async function es(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...

1410`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.

1411`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Fc(e,t){let n=fs(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...

1412`),ft("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.

1413`)}function Bc(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...

1414`),e.platform==="ios"){let r=ft("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.

Lines 1513-1553javascript

1513 <key>Label</key>

1514 ${gn(Yt)}

1515 <key>ProgramArguments</key>

1516 <array>

1517${o}

1518 </array>

1519 <key>EnvironmentVariables</key>

1520 <dict>

1521${r}

dist/chunk-6LOQKG2J.jsView file

37patternName = generic_password severity = medium line = 37 matchedText = Manual U...in(`

Medium

Secret Pattern

Hardcoded password in dist/chunk-6LOQKG2J.js

dist/chunk-6LOQKG2J.jsView on unpkg · L37