registry / create-mastra / 1.34.2
create-mastra@1.34.2
Create Mastra apps with one command
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package has no npm install lifecycle hook, and the scanner's agent-configuration hint is an unused path expression in the inspected source. Runtime telemetry is vendor-directed and limited, while credential verification, refresh, and browser login use the Mastra platform service.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Analytics initializes when the CLI entrypoint runs; it is disabled when MASTRA_TELEMETRY_DISABLED is set to a recognized true value.
Impact
The reviewed behavior discloses telemetry metadata to the vendor analytics service; no credential theft or harmful configuration mutation was established.
Mechanism
The CLI sends command and system metadata to PostHog. The reviewed agent configuration location only constructs paths and does not show a configuration write.
AI rationale
The package has no npm install lifecycle hook, and the scanner's agent-configuration hint is an unused path expression in the inspected source. Runtime telemetry is vendor-directed and limited, while credential verification, refresh, and browser login use the Mastra platform service.
Network endpoints1
us.posthog.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to the CLI entrypoint and lists no install lifecycle hooks.
- The flagged agent configuration paths are only constructed; this excerpt shows no write or configuration change.
- Telemetry can be disabled with an environment variable and otherwise sends command and system metadata to the configured PostHog host.
- The create command reports only its mode, skills, and git options as command arguments.
- Stored session tokens are verified or refreshed through the Mastra platform API; browser login also targets that service.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
8 flagged · loading sourcedist/index.jsView file
5import { EventEmitter, addAbortListener, on, once, setMaxListeners } from "node:events";
L6: import { ChildProcess, execFile, spawn, spawnSync } from "node:child_process";
L7: import path, { basename, delimiter, dirname, isAbsolute, normalize, resolve } from "node:path";
...
L35: * Constructs the CommanderError class
L36: * @param {number} exitCode suggested exit code which could be used with process.exit
L37: * @param {string} code an id string representing the error
...
L181: * @return {string}
L182: * @private
L183: */
...
L196: * TypeScript import types for JSDoc, used by Visual Studio Code IntelliSense and `npm run typescript-checkJS`
L197: * https://www.typescriptlang.org/docs/handbook/jsdoc-supported-types.html#import-types
L198: * @typedef { import("./argument.js").Argument } A
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L55Trigger-reachable chain: manifest.main -> dist/index.js
L5: import { EventEmitter, addAbortListener, on, once, setMaxListeners } from "node:events";
L6: import { ChildProcess, execFile, spawn, spawnSync } from "node:child_process";
L7: import path, { basename, delimiter, dirname, isAbsolute, normalize, resolve } from "node:path";
...
L35: * Constructs the CommanderError class
L36: * @param {number} exitCode suggested exit code which could be used with process.exit
L37: * @param {string} code an id string representing the error
...
L181: * @return {string}
L182: * @private
L183: */
...
L196: * TypeScript import types for JSDoc, used by Visual Studio Code IntelliSense and `npm run typescript-checkJS`
L197: * https://www.typescriptlang.org/docs/handbook/jsdoc-supported-types.html#import-types
Findings
2 Critical6 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/credentials-CK0wp32m-CJMPAZxG.js#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitydist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/credentials-CK0wp32m-CJMPAZxG.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/credentials-CK0wp32m-CJMPAZxG.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to create-mastra@1.34.2.
See all versions of create-mastra for other recorded verdicts.
- Review the evidence and your use of create-mastra@1.34.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.