mastra@1.25.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

mastra@1.25.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

9 flagged · loading source

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13

dist/studio/assets/tsx-B6W0miNI.jsView file

1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-mo...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio/assets/tsx-B6W0miNI.jsView on unpkg · L1

dist/analytics-BYD-0skL.jsView file

12import { fileURLToPath } from "url"; L13: import { execa } from "execa"; L14: import fsExtra from "fs-extra"; ... L109: const args = createArgs(versionTag); L110: if (editor === "vscode") return { servers: { mastra: process.platform === `win32` ? { L111: command: "cmd", ... L148: } L149: const windsurfGlobalMCPConfigPath = path.join(os.homedir(), ".codeium", "windsurf", "mcp_config.json"); L150: const antigravityGlobalMCPConfigPath = path.join(os.homedir(), ".gemini", "antigravity", "mcp_config.json"); ... L224: "pnpm-lock.yaml", L225: "package-lock.json", L226: "yarn.lock",

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/analytics-BYD-0skL.jsView on unpkg · L12

12Trigger-reachable chain: manifest.main -> dist/index.js -> dist/analytics-BYD-0skL.js L12: import { fileURLToPath } from "url"; L13: import { execa } from "execa"; L14: import fsExtra from "fs-extra"; ... L109: const args = createArgs(versionTag); L110: if (editor === "vscode") return { servers: { mastra: process.platform === `win32` ? { L111: command: "cmd", ... L148: } L149: const windsurfGlobalMCPConfigPath = path.join(os.homedir(), ".codeium", "windsurf", "mcp_config.json"); L150: const antigravityGlobalMCPConfigPath = path.join(os.homedir(), ".gemini", "antigravity", "mcp_config.json"); ... L224: "pnpm-lock.yaml", L225: "package-lock.json", L226: "yarn.lock",

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/analytics-BYD-0skL.jsView on unpkg · L12

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/analytics-BYD-0skL.js: import fs, { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs"; await fsPromises.writeFile("package.json", JSON.stringify(packageJson, null, 2)); await fs$1.writeFile(filePath, updated, "utf8"); throw new Error("Missing required file, checked the following paths: " + files.join(", ")); fs.writeFileSync(filePath, fileContent); await fsPromises.writeFile(destPath, content); await fsPromises.writeFile(destPath, `import { createStep, createWorkflow } from '@mastra/core/workflows'; const geocodingUrl = \`https://geocoding-api.open-meteo.com/v1/search?name=\${encodeURIComponent(inputData.city)}&count=1\`;

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/analytics-BYD-0skL.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. mastratoolingforagents?.skills, mcpserver: configuremastratoolingforagents?.mcpserver }; }; const checkforpkgjson = async () => { const cwd = process.cwd(); const pkgjsonpath = path.join(cwd, "package.json"); try { await fspromises.access(pkgjsonpath); } catch { p.log.error("no package.json file found in the current directory. please run \"npm init -y\" to create one, or run \"npx create-mastra@latest\" to create a new mastra project."

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/analytics-BYD-0skL.jsView on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mastra@1.24.0 matchedIdentity = npm:bWFzdHJh:1.24.0 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { access, chmod, lstat, mkdir, open, readFile, readdir, readlink, rm, stat, unlink, writeFile } from "fs/promises"; fs.writeFileSync(filePath, content); await fh.writeFile(JSON.stringify(manifest, null, 2)); const { writeFile } = await import("fs/promises"); await writeFile(fileURLToPath(uploadUrl), Buffer.from(zipBuffer)); await writeFile(resolveConfigPath(dir, configFile), JSON.stringify(config, null, 2) + "\n"); await writeFile(lockPath, JSON.stringify(data), { await writeFile(lockPath, JSON.stringify(data), {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

dist/studio/assets/main-KfoT5ar4.jsView file

•path = dist/studio/assets/main-KfoT5ar4.js kind = oversized_source_file sizeBytes = 7048474 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-KfoT5ar4.jsView on unpkg

Source & flagged code

9 flagged

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13

dist/studio/assets/tsx-B6W0miNI.jsView file

Lines 1-2javascript

1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-modifier":{"match":"(?<![_$[:alnum:]])(?:(?<=\\\\.\\\\.\\\\.)|(?<!\\\\.))(abstract|declare|override|public|protected|private|readonly|static)(?![_$[:alnum:]])(?:(?=\\\\.\\\\.\\\\.)|(?!\\\\.))","name":"storage.modifier.tsx"},"after-operator-block-as-object-literal":{"begin":"(?<!\\\\+\\\\+|--)(?<=[:=(,\\\\[?+!>]|^await|[^\\\\._$[:alnum:]]await|^return|[^\\\\._$[:alnum:]]return|^yield|[^\\\\._$[:alnum:]]yield|^throw|[^\\ ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio/assets/tsx-B6W0miNI.jsView on unpkg · L1

2

Long lines were clipped for display.

dist/analytics-BYD-0skL.jsView file

Lines 1-32javascript

1import { a as loadCredentials, i as getToken } from "./credentials-CE1thn6C.js";

2import { r as resolveCurrentOrg } from "./orgs-DOhO9kNz.js";

3import { InvalidArgumentError } from "commander";

4

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mastra@1.24.0 matchedIdentity = npm:bWFzdHJh:1.24.0 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { access, chmod, lstat, mkdir, open, readFile, readdir, readlink, rm, stat, unlink, writeFile } from "fs/promises"; fs.writeFileSync(filePath, content); await fh.writeFile(JSON.stringify(manifest, null, 2)); const { writeFile } = await import("fs/promises"); await writeFile(fileURLToPath(uploadUrl), Buffer.from(zipBuffer)); await writeFile(resolveConfigPath(dir, configFile), JSON.stringify(config, null, 2) + "\n"); await writeFile(lockPath, JSON.stringify(data), { await writeFile(lockPath, JSON.stringify(data), {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

dist/studio/assets/main-KfoT5ar4.jsView file

•path = dist/studio/assets/main-KfoT5ar4.js kind = oversized_source_file sizeBytes = 7048474 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-KfoT5ar4.jsView on unpkg