registry / create-mastra / 1.20.3

create-mastra@1.20.3

⚠ Under review

Create Mastra apps with one command

Static Scan Results

scanned 23d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 640 KB of source, external domains: api.open-meteo.com, app.posthog.com, blog.stevenlevithan.com, gateway-api.mastra.ai, gateway-api.staging.mastra.ai, geocoding-api.open-meteo.com, github.com, json-schema.org, mastra.ai, platform.mastra.ai, projects.mastra.ai, qntm.org, raw.githubusercontent.com, stackoverflow.com, studio.mastra.ai, studio.staging.mastra.ai, thekevinscott.com, us.posthog.com

Source & flagged code

6 flagged

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = create-mastra@1.18.1 matchedIdentity = npm:Y3JlYXRlLW1hc3RyYQ:1.18.1 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

13import tty, { ReadStream } from 'node:tty'; L14: import require$$0, { execFileSync, ChildProcess, execFile, spawnSync, spawn } from 'node:child_process'; L15: import { createServer } from 'node:http';

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L13

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L9

18525try { L18526: await execa(packageManager || getPackageManager(), ["install"], { L18527: cwd: projectPath, ... L18537: } L18538: const TEMPLATES_API_URL = process.env.MASTRA_TEMPLATES_API_URL || "https://mastra.ai/api/templates.json"; L18539: async function loadTemplates() {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L18525

10447// If `subprocess.stdin` is destroyed before being fully written to, it is considered aborted and should throw an error. L10448: // This can happen for example when user called `subprocess.stdin.destroy()` before `subprocess.stdin.end()`. L10449: // However, Node.js calls `subprocess.stdin.destroy()` on exit for cleanup purposes. L10450: // https://github.[redacted]child_process.js#L278 L10451: // This is normal and should not throw an error. ... L10456: // The only way to detect this is to spy on `subprocess.stdin._destroy()` by wrapping it. L10457: // If `subprocess.exitCode` or `subprocess.signalCode` is set, it means `.destroy()` is being called by Node.js itself. L10458: const handleStdinDestroy = (stream, {originalStreams: [originalStdin], subprocess}) => {

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L10447

9import require$$4, { styleText, debuglog, stripVTControlCharacters, inspect, promisify, callbackify, aborted as aborted$1 } from 'node:util'; L10: import process$3, { stdout, stdin, platform, hrtime, execPath, execArgv } from 'node:process'; L11: import * as l from 'node:readline'; ... L14: import require$$0, { execFileSync, ChildProcess, execFile, spawnSync, spawn } from 'node:child_process'; L15: import { createServer } from 'node:http'; L16: import { PostHog } from 'posthog-node'; ... L88: // with no body, we should not to set Content-Type L89: serializedBody === void 0 || // if serialized body is FormData; browser will correctly set Content-Type & boundary expression L90: serializedBody instanceof FormData ? {} : { ... L216: if (parseAs === "json" && !contentLength) { L217: const r

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L9

Source & flagged code

6 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code