mastra@1.27.2: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

mastra@1.27.2: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

12 flagged · loading source

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13

dist/credentials-CdxijtI9.jsView file

6import { chmod, mkdir, readFile, unlink, writeFile } from "fs/promises"; L7: import { execFileSync } from "child_process"; L8: import { createServer } from "http";

High

Child Process

Package source references child process execution.

dist/credentials-CdxijtI9.jsView on unpkg · L6

68]); L69: else if (isWSL()) execFileSync("powershell.exe", [ L70: "-NoProfile",

High

Shell

Package source references shell execution.

dist/credentials-CdxijtI9.jsView on unpkg · L68

dist/studio/assets/tsx-B6W0miNI.jsView file

1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-mo...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/studio/assets/tsx-B6W0miNI.jsView on unpkg · L1

dist/create-Cu2bo-Ss.jsView file

108try { L109: await execa(packageManager || getPackageManager(), ["install"], { L110: cwd: projectPath, ... L122: //#region src/utils/template-utils.ts L123: const TEMPLATES_API_URL = process.env.MASTRA_TEMPLATES_API_URL || "https://mastra.ai/api/templates.json"; L124: async function loadTemplates() {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/create-Cu2bo-Ss.jsView on unpkg · L108

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/create-Cu2bo-Ss.js: const degitRepo = repoUrl.replace("https://github.com/", ""); await fsPromises.writeFile(packageJsonPath, JSON.stringify(packageJson, null, 2), "utf-8"); const TEMPLATES_API_URL = process.env.MASTRA_TEMPLATES_API_URL || "https://mastra.ai/api/templates.json"; const DEFAULT_PLATFORM_API_URL = "https://platform.mastra.ai"; const EMPTY_GITIGNORE = `node_modules fsPromises.writeFile(path.join(projectPath, "package.json"), `${JSON.stringify(packageJson, null, 2)}\n`, "utf8"), fsPromises.writeFile(path.join(projectPath, "tsconfig.json"), `${JSON.stringify(EMPTY_TSCONFIG, null, 2)}\n`, "utf8"), fsPromises.writeFile(path.join(projectPath,

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/create-Cu2bo-Ss.jsView on unpkg

dist/analytics-CeDc63iC.jsView file

12import { fileURLToPath } from "url"; L13: import { execa } from "execa"; L14: import fsExtra from "fs-extra"; ... L109: const args = createArgs(versionTag); L110: if (editor === "vscode") return { servers: { mastra: process.platform === `win32` ? { L111: command: "cmd", ... L148: } L149: const windsurfGlobalMCPConfigPath = path.join(os.homedir(), ".codeium", "windsurf", "mcp_config.json"); L150: const antigravityGlobalMCPConfigPath = path.join(os.homedir(), ".gemini", "antigravity", "mcp_config.json"); ... L224: "pnpm-lock.yaml", L225: "package-lock.json", L226: "yarn.lock",

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/analytics-CeDc63iC.jsView on unpkg · L12

12Trigger-reachable chain: manifest.main -> dist/index.js -> dist/analytics-CeDc63iC.js L12: import { fileURLToPath } from "url"; L13: import { execa } from "execa"; L14: import fsExtra from "fs-extra"; ... L109: const args = createArgs(versionTag); L110: if (editor === "vscode") return { servers: { mastra: process.platform === `win32` ? { L111: command: "cmd", ... L148: } L149: const windsurfGlobalMCPConfigPath = path.join(os.homedir(), ".codeium", "windsurf", "mcp_config.json"); L150: const antigravityGlobalMCPConfigPath = path.join(os.homedir(), ".gemini", "antigravity", "mcp_config.json"); ... L224: "pnpm-lock.yaml", L225: "package-lock.json", L226: "yarn.lock",

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/analytics-CeDc63iC.jsView on unpkg · L12

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mastra@1.26.0 matchedIdentity = npm:bWFzdHJh:1.26.0 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { access, chmod, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, rm, stat, unlink, writeFile } from "fs/promises"; fs.writeFileSync(filePath, content); await fh.writeFile(JSON.stringify(manifest, null, 2)); await writeFile(lockPath, JSON.stringify(data), { await writeFile(lockPath, JSON.stringify(data), { await writeFile(lockPath, JSON.stringify(data), "utf-8"); await writeFile(lockPath, JSON.stringify(data), "utf-8"); const { writeFile } = await import("fs/promises");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

dist/studio/assets/main-B2YJT1E1.jsView file

•path = dist/studio/assets/main-B2YJT1E1.js kind = oversized_source_file sizeBytes = 7083549 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-B2YJT1E1.jsView on unpkg

Source & flagged code

12 flagged

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/studio/assets/livekit-client.esm-CKIgC2IJ.jsView on unpkg · L13

dist/credentials-CdxijtI9.jsView file

Lines 1-26javascript

1import { t as MASTRA_PLATFORM_API_URL } from "./client-Bdk2AMV6.js";

2import { randomBytes } from "crypto";

3import { readFileSync } from "fs";

4import { homedir, release } from "os";

5import { join } from "path";

6import { chmod, mkdir, readFile, unlink, writeFile } from "fs/promises";

7import { execFileSync } from "child_process";

8import { createServer } from "http";

High

Child Process

Package source references child process execution.

dist/credentials-CdxijtI9.jsView on unpkg · L6

9//#region src/commands/auth/credentials.ts

10const CREDENTIALS_DIR = join(homedir(), ".mastra");

11const CREDENTIALS_FILE = join(CREDENTIALS_DIR, "credentials.json");

12var LoginCancelledError = class extends Error {

13 constructor() {

14 super("Login skipped.");

15 this.name = "LoginCancelledError";

16 }

17};

18async function saveCredentials(creds) {

19 await mkdir(CREDENTIALS_DIR, {

20 recursive: true,

21 mode: 448

22 });

23 await writeFile(CREDENTIALS_FILE, JSON.stringify(creds, null, 2), { mode: 384 });

24 await chmod(CREDENTIALS_DIR, 448).catch(() => {});

25 await chmod(CREDENTIALS_FILE, 384).catch(() => {});

26}

Lines 48-88javascript

48 const creds = await loadCredentials();

49 if (!creds) throw new Error("Not logged in");

50 creds.currentOrgId = orgId;

51 await

dist/studio/assets/tsx-B6W0miNI.jsView file

Lines 1-2javascript

1const e=Object.freeze(JSON.parse(`{"displayName":"TSX","name":"tsx","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-modifier":{"match":"(?<![_$[:alnum:]])(?:(?<=\\\\.\\\\.\\\\.)|(?<!\\\\.))(abstract|declare|override|public|protected|private|readonly|static)(?![_$[:alnum:]])(?:(?=\\\\.\\\\.\\\\.)|(?!

dist/create-Cu2bo-Ss.jsView file

Lines 88-128javascript

88 });

89 } catch (gitError) {

90 if (signal?.aborted) signal.throwIfAborted();

91 throw new Error(`Failed to clone repository: ${gitError instanceof Error ?

dist/analytics-CeDc63iC.jsView file

Lines 1-32javascript

1import { a as loadCredentials, i as getToken } from "./credentials-CdxijtI9.js";

2import { r as resolveCurrentOrg } from "./orgs-Dj0nij3E.js";

3import { InvalidArgumentError } from "commander";

4

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mastra@1.26.0 matchedIdentity = npm:bWFzdHJh:1.26.0 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { access, chmod, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, rm, stat, unlink, writeFile } from "fs/promises"; fs.writeFileSync(filePath, content); await fh.writeFile(JSON.stringify(manifest, null, 2)); await writeFile(lockPath, JSON.stringify(data), { await writeFile(lockPath, JSON.stringify(data), { await writeFile(lockPath, JSON.stringify(data), "utf-8"); await writeFile(lockPath, JSON.stringify(data), "utf-8"); const { writeFile } = await import("fs/promises");

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

dist/studio/assets/main-B2YJT1E1.jsView file

•path = dist/studio/assets/main-B2YJT1E1.js kind = oversized_source_file sizeBytes = 7083549 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-B2YJT1E1.jsView on unpkg