mastra@1.31.4: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

mastra@1.31.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

11 flagged · loading source

dist/studio/assets/engine-compile-CUTZfOIo.js#virtual:normalized:round1View file

1import{r as he,C as R,h as H,g as dt,f as Ct}from"./index-2BQyy0xI.js";const de=String.raw,ve=de`(?:\p{Emoji}\uFE0F\u20E3?|\p{Emoji_Modifier_Base}\p{Emoji_Modifier}?|\p{Emoji_Prese... L2: \\(?: \d+

High

Child Process

Package source references child process execution.

dist/studio/assets/engine-compile-CUTZfOIo.js#virtual:normalized:round1View on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/studio/assets/engine-compile-CUTZfOIo.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mastra@1.31.3 matchedIdentity = npm:bWFzdHJh:1.31.3 similarity = 1.551 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

18import { fileURLToPath } from "url"; L19: import { execa } from "execa"; L20: import * as fsExtra$1 from "fs-extra";

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L18

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { access, chmod, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, rename, rm, stat, unlink, writeFile } from "fs/promises"; import { createInterface } from "readline"; fs.writeFileSync(filePath, content); await fh.writeFile(JSON.stringify(manifest, null, 2)); const authorization = request.headers.authorization; if (!workerConfigToken || !authorization?.startsWith('Bearer ')) return false; const providedToken = Buffer.from(authorization.slice('Bearer '.length)); await writeFile(lockPath, JSON.stringify(data), {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

18224try { L18225: new Function(""); L18226: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L18224

dist/create-8eSMsePo.jsView file

108try { L109: await execa(packageManager || getPackageManager(), ["install"], { L110: cwd: projectPath, ... L122: //#region src/utils/template-utils.ts L123: const TEMPLATES_API_URL = process.env.MASTRA_TEMPLATES_API_URL || "https://mastra.ai/api/templates.json"; L124: async function loadTemplates() {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/create-8eSMsePo.jsView on unpkg · L108

dist/factory/assets/index-DrkzT-Yl.jsView file

•Credential-bearing message sent to a fixed external iframe in dist/factory/assets/index-DrkzT-Yl.js: */var J8;function i_e(){if(J8)return Ps;J8=1;var e=jw();function t(c){var u="https://react.dev/errors/"+c;if(1<arguments.length){u+="?args[]="+encodeURIComponent(arguments[1]);for(... */var uU;function R$e(){return uU||(uU=1,(function(e){function t(G,Z){var W=G.length;G.push(Z);e:for(;0<W;){var Y=W-1>>>1,A=G[Y];if(0<a(A,Z))G[Y]=Z,G[W]=A,W=Y;else break e}}functio... */var fU;function A$e(){if(fU)return Gv;fU=1;var e=T$e(),t=jw(),n=jJ();function r(m){var h="https://react.dev/errors/"+m;if(1<arguments.length){h+="?args[]="+encodeURIComponent(arg... `+$.stack}}var ke=Object.prototype.hasOwnProperty,Fe=e.unstable_scheduleCallback,De=e.unstable_cancelCallback,Ce=e.unstable_shouldYield,$e=e.unstab

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/factory/assets/index-DrkzT-Yl.jsView on unpkg

dist/analytics-ApCkf_UK.jsView file

12Trigger-reachable chain: manifest.main -> dist/index.js -> dist/analytics-ApCkf_UK.js L12: import { fileURLToPath } from "url"; L13: import { execa } from "execa"; L14: import fsExtra from "fs-extra"; ... L109: const args = createArgs(versionTag); L110: if (editor === "vscode") return { servers: { mastra: process.platform === `win32` ? { L111: command: "cmd", ... L148: } L149: const windsurfGlobalMCPConfigPath = path.join(os.homedir(), ".codeium", "windsurf", "mcp_config.json"); L150: const antigravityGlobalMCPConfigPath = path.join(os.homedir(), ".gemini", "antigravity", "mcp_config.json"); ... L224: "pnpm-lock.yaml", L225: "package-lock.json", L226: "yarn.lock",

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/analytics-ApCkf_UK.jsView on unpkg · L12

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. mastratoolingforagents?.skills, mcpserver: configuremastratoolingforagents?.mcpserver }; }; const checkforpkgjson = async () => { const cwd = process.cwd(); const pkgjsonpath = path.join(cwd, "package.json"); try { await fspromises.access(pkgjsonpath); } catch { p.log.error("no package.json file found in the current directory. please run \"npm init -y\" to create one, or run \"npx create-mastra@latest\" to create a new mastra project."

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/analytics-ApCkf_UK.jsView on unpkg

dist/studio/assets/main-BdlnxtPy.jsView file

•path = dist/studio/assets/main-BdlnxtPy.js kind = oversized_source_file sizeBytes = 7158770 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-BdlnxtPy.jsView on unpkg

Source & flagged code

11 flagged

dist/studio/assets/engine-compile-CUTZfOIo.js#virtual:normalized:round1View file

1import{r as he,C as R,h as H,g as dt,f as Ct}from"./index-2BQyy0xI.js";const de=String.raw,ve=de`(?:\p{Emoji}\uFE0F\u20E3?|\p{Emoji_Modifier_Base}\p{Emoji_Modifier}?|\p{Emoji_Prese... L2: \\(?: \d+

High

Child Process

Package source references child process execution.

dist/studio/assets/engine-compile-CUTZfOIo.js#virtual:normalized:round1View on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/studio/assets/engine-compile-CUTZfOIo.js#virtual:normalized:round1View on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = mastra@1.31.3 matchedIdentity = npm:bWFzdHJh:1.31.3 similarity = 1.551 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

18import { fileURLToPath } from "url"; L19: import { execa } from "execa"; L20: import * as fsExtra$1 from "fs-extra";

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L18

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { access, chmod, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, rename, rm, stat, unlink, writeFile } from "fs/promises"; import { createInterface } from "readline"; fs.writeFileSync(filePath, content); await fh.writeFile(JSON.stringify(manifest, null, 2)); const authorization = request.headers.authorization; if (!workerConfigToken || !authorization?.startsWith('Bearer ')) return false; const providedToken = Buffer.from(authorization.slice('Bearer '.length)); await writeFile(lockPath, JSON.stringify(data), {

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

18224try { L18225: new Function(""); L18226: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L18224

dist/create-8eSMsePo.jsView file

Lines 88-128javascript

88 });

89 } catch (gitError) {

90 if (signal?.aborted) signal.throwIfAborted();

91 throw new Error(`Failed to clone repository: ${gitError instanceof Error ?

dist/factory/assets/index-DrkzT-Yl.jsView file

•Credential-bearing message sent to a fixed external iframe in dist/factory/assets/index-DrkzT-Yl.js: */var J8;function i_e(){if(J8)return Ps;J8=1;var e=jw();function t(c){var u="https://react.dev/errors/"+c;if(1<arguments.length){u+="?args[]="+encodeURIComponent(arguments[1]);for(... */var uU;function R$e(){return uU||(uU=1,(function(e){function t(G,Z){var W=G.length;G.push(Z);e:for(;0<W;){var Y=W-1>>>1,A=G[Y];if(0<a(A,Z))G[Y]=Z,G[W]=A,W=Y;else break e}}functio... */var fU;function A$e(){if(fU)return Gv;fU=1;var e=T$e(),t=jw(),n=jJ();function r(m){var h="https://react.dev/errors/"+m;if(1<arguments.length){h+="?args[]="+encodeURIComponent(arg... `+$.stack}}var ke=Object.prototype.hasOwnProperty,Fe=e.unstable_scheduleCallback,De=e.unstable_cancelCallback,Ce=e.unstable_shouldYield,$e=e.unstab

Critical

Hardcoded Runtime Data Exfiltration

Source sends credentials or rich application records to a package-controlled external receiver enabled by default.

dist/factory/assets/index-DrkzT-Yl.jsView on unpkg

dist/analytics-ApCkf_UK.jsView file

Lines 1-32javascript

1import { a as loadCredentials, i as getToken } from "./credentials-Cgc5DcYQ.js";

2import { r as resolveCurrentOrg } from "./orgs-BGNxdLAr.js";

3import { InvalidArgumentError } from "commander";

4

dist/studio/assets/main-BdlnxtPy.jsView file

•path = dist/studio/assets/main-BdlnxtPy.js kind = oversized_source_file sizeBytes = 7158770 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/studio/assets/main-BdlnxtPy.jsView on unpkg