registry / mastracode / 0.29.0

mastracode@0.29.0

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 2.43 MB of source, external domains: 127.0.0.1, api.githubcopilot.com, api.groq.com, api.individual.githubcopilot.com, api.moonshot.ai, api.openai.com, api.scaleway.ai, auth.openai.com, chatgpt.com, claude.ai, cloud-api.near.ai, console.anthropic.com, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, gateway-api.mastra.ai, github.com, integrate.api.nvidia.com, mastra.ai, mcp.example.com, models.dev, models.think.evroc.com, registry.npmjs.org, unpkg.com, us.posthog.com

Source & flagged code

9 flagged

dist/chunk-ZJBXLVSV.jsView file

Lines 1-63javascript

1import { getLocalPlansRelativeDir, getPlansDir, setAuthStorage, loadSettings, MEMORY_GATEWAY_PROVIDER, HookManager, getAvailableModePacks, getAvailableOmPacks, resolveModelDefaults, resolveOmRoleModel, releaseThreadLock, acquireThreadLock, saveSettings, releaseAllThreadLocks, OBSERVABILITY_AUTH_PREFIX, mastra, getCustomProviderId, getEffectiveThinkingLevel, createCodexMiddleware, THINKING_LEVEL_TO_REASONING_EFFORT, buildOpenAICodexOAuthFetch, openaiCodexProvider, isPlanFilePath } from './chunk-RHWBSPSP.js';

2import { AuthStorage, DEFAULT_OM_MODEL_ID, DEFAULT_CONFIG_DIR, validateConfigDirName, detectProject, getResourceIdOverride, getStorageConfig, getObservabilityDatabasePath, getAppDataDir, getVectorDatabasePath, getCurrentGitBranchAsync, getOmScope, DEFAULT_REF_THRESHOLD, DEFAULT_OBS_THRESHOLD, getGitHubCopilotBaseUrl, fetchCopilotModels, getDatabasePath, COPILOT_HEADERS } from './chunk-GETSQXPO.js';

3import { getToolCategory, MC_TOOLS, TOOL_NAME_OVERRIDES } from './chunk-UOFNLVKF.js';

4import * as fs7 from 'fs';

5import fs7__default, { existsSync, readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';

6import { parseArgs } from 'util';

7import { createHash } from 'crypto';

8import * as os from 'os';

9import os__default, { hostname, homedir } from 'os';

10import * as path11 from 'path';

11import path11__default, { normalize, join, dirname, posix } from 'path';

12import { AgentController } from '@mastra/core/agent-controller';

13import { createCodingAgent, buildBasePrompt } from '@mastra/core/coding-agent';

14import { PROVIDER_REGISTRY, MastraModelGateway, MastraGateway, ModelRouterLanguageModel, GATEWAY_AUTH_HEADER, GatewayRegistry } from '@mastra/core/llm';

15import { Mastra } from '@mastra/core/mastra';

16import { StreamErrorRetryProcessor, PrefillErrorHandler, ProviderHistoryCompat, AgentsMDInjector, isBadRequestError } from '@mastra/core/processors';

17import { RequestContext } from '@mastra/core/request-context';

18import { TaskSignalProvider } from '@mastra/core/signals';

19import { InMemoryHarness, MastraCompositeStore } from '@mastra/core/storage';

20import { createTool, DEFAULT_GOAL_JUDGE_PROMPT } from '@mastra/core/tools';

21import { DuckDBStore } from '@mastra/duckdb';

22import { GithubSignals } from '@mastra/github-signals';

23import { Observability, SensitiveDataFilter, MastraStorageExporter, MastraPlatformExporter } from '@mastra/observability';

24import { execFile, spawn } from 'child_process';

25import { createTavilySearchTool, createTavilyExtractTool } from '@mastra/tavily';

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-ZJBXLVSV.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/chunk-ZJBXLVSV.jsView on unpkg · L23

26import { estimateTokenCount, sliceByTokens } from 'tokenx';

27import { LocalFilesystem, createWorkspaceTools, Workspace, LocalSandbox as LocalSandbox$1, WORKSPACE_TOOLS } from '@mastra/core/workspace';

28import { z } from 'zod';

29import { fileURLToPath, pathToFileURL } from 'url';

30import { RailwaySandbox } from '@mastra/railway';

31import { pgTable, timestamp, text, bigint, uuid, uniqueIndex } from 'drizzle-orm/pg-core';

32import { fastembed } from '@mastra/fastembed';

33import { Memory } from '@mastra/memory';

34import { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';

35import { fromNodeProviderChain } from '@aws-sdk/credential-providers';

36import { createAnthropic } from '@ai-sdk/anthropic';

37import { createOpenAI } from '@ai-sdk/openai';

38import { createOpenAICompatible } from '@ai-sdk/openai-compatible';

39import { wrapLanguageModel } from 'ai';

40import { GoogleSchemaCompatLayer, applyCompatLayer } from '@mastra/schema-compat';

41import { createNotificationInboxTool, NotificationsStorage } from '@mastra/core/notifications';

42import { createScorer, filterRun } from '@mastra/core/evals';

43import { MCPClient, MCPOAuthClientProvider } from '@mastra/mcp';

44import { execa } from 'execa';

45import { mkdir } from 'fs/promises';

High

Shell

Package source references shell execution.

dist/chunk-ZJBXLVSV.jsView on unpkg · L43

46import { PubSub, UnixSocketPubSub } from '@mastra/core/events';

47import { LibSQLStore, LibSQLVector } from '@mastra/libsql';

48import { PostgresStore } from '@mastra/pg';

50// src/headless/policy.ts

51var autoApprovePolicy = {

52 onToolApproval(_event) {

53 return "approve";

54 },

55 onSuspension(event) {

56 const payload = event.suspendPayload ?? {};

57 if (event.toolName === "request_access" || payload.kind === "sandbox_access_request") {

58 return { resumeData: "Yes" };

59 }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chunk-ZJBXLVSV.jsView on unpkg · L23

60 if (event.toolName === "submit_plan") {

61 return { resumeData: { action: "approved" } };

62 }

63 return { resumeData: "Proceed with your best judgment. Do not ask further questions." };

dist/headless.cjsView file

Lines 1-22javascript

1'use strict';

3var chunkJU3BZYCN_cjs = require('./chunk-JU3BZYCN.cjs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/headless.cjsView on unpkg · L2

7Object.defineProperty(exports, "VALID_MODES", {

8 enumerable:

dist/chunk-KXTU547O.jsView file

3import { MC_TOOLS, getToolCategory, TOOL_CATEGORIES } from './chunk-UOFNLVKF.js'; L4: import { spawn, execFile, execSync, execFileSync } from 'child_process'; L5: import { randomUUID, createHash } from 'crypto'; ... L449: /** L450: * Private constructor — use static factories or the options constructor. L451: */ ... L838: box.addChild( L839: new Text(theme.fg("dim", "See https://mastra.ai/models for supported providers and API key env vars."), 0, 0) L840: ); ... L1134: async function detectPackageManager() { L1135: const userAgent = process.env.npm[redacted]; L1136: if (userAgent) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-KXTU547O.jsView on unpkg · L3

CHANGELOG.mdView file

455patternName = private_key_rsa severity = critical line = 455 matchedText = GITHUB_A...---"

Critical

Secret Pattern

RSA private key in CHANGELOG.md

CHANGELOG.mdView on unpkg · L455

683patternName = private_key_rsa severity = critical line = 683 matchedText = GITHUB_A...---"

Critical

Secret Pattern

RSA private key in CHANGELOG.md

CHANGELOG.mdView on unpkg · L683

README.mdView file

300patternName = private_key_rsa severity = critical line = 300 matchedText = export G...---"

Critical

Secret Pattern

RSA private key in README.md

README.mdView on unpkg · L300

Source & flagged code

9 flagged · loading source

dist/chunk-ZJBXLVSV.jsView file

High

Child Process

Package source references child process execution.

dist/chunk-ZJBXLVSV.jsView on unpkg · L23

43import { MCPClient, MCPOAuthClientProvider } from '@mastra/mcp'; L44: import { execa } from 'execa'; L45: import { mkdir } from 'fs/promises';

High

Shell

Package source references shell execution.

dist/chunk-ZJBXLVSV.jsView on unpkg · L43

23import { Observability, SensitiveDataFilter, MastraStorageExporter, MastraPlatformExporter } from '@mastra/observability'; L24: import { execFile, spawn } from 'child_process'; L25: import { createTavilySearchTool, createTavilyExtractTool } from '@mastra/tavily'; ... L57: if (event.toolName === "request_access" || payload.kind === "sandbox_access_request") { L58: return { resumeData: "Yes" }; L59: } ... L87: } L88: function exitCodeForStatus(status) { L89: switch (status) { ... L478: function resolveBinaryAsync(name) { L479: const command = process.platform === "win32" ? "where" : "which"; L480: return new Promise((resolve3) => {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chunk-ZJBXLVSV.jsView on unpkg · L23

1import { getLocalPlansRelativeDir, getPlansDir, setAuthStorage, loadSettings, MEMORY_GATEWAY_PROVIDER, HookManager, getAvailableModePacks, getAvailableOmPacks, resolveModelDefaults... L2: import { AuthStorage, DEFAULT_OM_MODEL_ID, DEFAULT_CONFIG_DIR, validateConfigDirName, detectProject, getResourceIdOverride, getStorageConfig, getObservabilityDatabasePath, getAppDa... L3: import { getToolCategory, MC_TOOLS, TOOL_NAME_OVERRIDES } from './chunk-UOFNLVKF.js'; ... L23: import { Observability, SensitiveDataFilter, MastraStorageExporter, MastraPlatformExporter } from '@mastra/observability'; L24: import { execFile, spawn } from 'child_process'; L25: import { createTavilySearchTool, createTavilyExtractTool } from '@mastra/tavily'; ... L1633: try { L1634: const content = readFileSync(filePath, "utf-8").trim(); L1635: if (content) {

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-ZJBXLVSV.jsView on unpkg · L1

dist/headless.cjsView file

2L3: var chunkJU3BZYCN_cjs = require('./chunk-JU3BZYCN.cjs'); L4:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/headless.cjsView on unpkg · L2

dist/chunk-KXTU547O.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-KXTU547O.jsView on unpkg · L3

CHANGELOG.mdView file

455patternName = private_key_rsa severity = critical line = 455 matchedText = GITHUB_A...---"

Critical

Secret Pattern

RSA private key in CHANGELOG.md

CHANGELOG.mdView on unpkg · L455

683patternName = private_key_rsa severity = critical line = 683 matchedText = GITHUB_A...---"

Critical

Secret Pattern

RSA private key in CHANGELOG.md

CHANGELOG.mdView on unpkg · L683

README.mdView file

300patternName = private_key_rsa severity = critical line = 300 matchedText = export G...---"

Critical

Secret Pattern

RSA private key in README.md

README.mdView on unpkg · L300

Findings

3 Critical4 High5 Medium5 Low

CriticalSecret PatternCHANGELOG.md

CriticalSecret PatternREADME.md

HighChild Processdist/chunk-ZJBXLVSV.js

HighShelldist/chunk-ZJBXLVSV.js

HighSandbox Evasion Gated Capabilitydist/chunk-ZJBXLVSV.js

HighRemote Agent Bridgedist/chunk-ZJBXLVSV.js

MediumDynamic Requiredist/headless.cjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/chunk-KXTU547O.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

9 flagged

dist/chunk-ZJBXLVSV.jsView file

Lines 1-63javascript

1import { getLocalPlansRelativeDir, getPlansDir, setAuthStorage, loadSettings, MEMORY_GATEWAY_PROVIDER, HookManager, getAvailableModePacks, getAvailableOmPacks, resolveModelDefaults, resolveOmRoleModel, releaseThreadLock, acquireThreadLock, saveSettings, releaseAllThreadLocks, OBSERVABILITY_AUTH_PREFIX, mastra, getCustomProviderId, getEffectiveThinkingLevel, createCodexMiddleware, THINKING_LEVEL_TO_REASONING_EFFORT, buildOpenAICodexOAuthFetch, openaiCodexProvider, isPlanFilePath } from './chunk-RHWBSPSP.js';

3import { getToolCategory, MC_TOOLS, TOOL_NAME_OVERRIDES } from './chunk-UOFNLVKF.js';

4import * as fs7 from 'fs';

5import fs7__default, { existsSync, readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';

6import { parseArgs } from 'util';

7import { createHash } from 'crypto';

8import * as os from 'os';

9import os__default, { hostname, homedir } from 'os';

10import * as path11 from 'path';

11import path11__default, { normalize, join, dirname, posix } from 'path';

12import { AgentController } from '@mastra/core/agent-controller';

13import { createCodingAgent, buildBasePrompt } from '@mastra/core/coding-agent';

14import { PROVIDER_REGISTRY, MastraModelGateway, MastraGateway, ModelRouterLanguageModel, GATEWAY_AUTH_HEADER, GatewayRegistry } from '@mastra/core/llm';

15import { Mastra } from '@mastra/core/mastra';

16import { StreamErrorRetryProcessor, PrefillErrorHandler, ProviderHistoryCompat, AgentsMDInjector, isBadRequestError } from '@mastra/core/processors';

17import { RequestContext } from '@mastra/core/request-context';

18import { TaskSignalProvider } from '@mastra/core/signals';

19import { InMemoryHarness, MastraCompositeStore } from '@mastra/core/storage';

20import { createTool, DEFAULT_GOAL_JUDGE_PROMPT } from '@mastra/core/tools';

21import { DuckDBStore } from '@mastra/duckdb';

22import { GithubSignals } from '@mastra/github-signals';

23import { Observability, SensitiveDataFilter, MastraStorageExporter, MastraPlatformExporter } from '@mastra/observability';

24import { execFile, spawn } from 'child_process';

25import { createTavilySearchTool, createTavilyExtractTool } from '@mastra/tavily';

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/chunk-ZJBXLVSV.jsView on unpkg · L1

High

Child Process

Package source references child process execution.

dist/chunk-ZJBXLVSV.jsView on unpkg · L23

26import { estimateTokenCount, sliceByTokens } from 'tokenx';

27import { LocalFilesystem, createWorkspaceTools, Workspace, LocalSandbox as LocalSandbox$1, WORKSPACE_TOOLS } from '@mastra/core/workspace';

28import { z } from 'zod';

29import { fileURLToPath, pathToFileURL } from 'url';

30import { RailwaySandbox } from '@mastra/railway';

31import { pgTable, timestamp, text, bigint, uuid, uniqueIndex } from 'drizzle-orm/pg-core';

32import { fastembed } from '@mastra/fastembed';

33import { Memory } from '@mastra/memory';

34import { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';

35import { fromNodeProviderChain } from '@aws-sdk/credential-providers';

36import { createAnthropic } from '@ai-sdk/anthropic';

37import { createOpenAI } from '@ai-sdk/openai';

38import { createOpenAICompatible } from '@ai-sdk/openai-compatible';

39import { wrapLanguageModel } from 'ai';

40import { GoogleSchemaCompatLayer, applyCompatLayer } from '@mastra/schema-compat';

41import { createNotificationInboxTool, NotificationsStorage } from '@mastra/core/notifications';

42import { createScorer, filterRun } from '@mastra/core/evals';

43import { MCPClient, MCPOAuthClientProvider } from '@mastra/mcp';

44import { execa } from 'execa';

45import { mkdir } from 'fs/promises';

High

Shell

Package source references shell execution.

dist/chunk-ZJBXLVSV.jsView on unpkg · L43

46import { PubSub, UnixSocketPubSub } from '@mastra/core/events';

47import { LibSQLStore, LibSQLVector } from '@mastra/libsql';

48import { PostgresStore } from '@mastra/pg';

50// src/headless/policy.ts

51var autoApprovePolicy = {

52 onToolApproval(_event) {

53 return "approve";

54 },

55 onSuspension(event) {

56 const payload = event.suspendPayload ?? {};

57 if (event.toolName === "request_access" || payload.kind === "sandbox_access_request") {

58 return { resumeData: "Yes" };

59 }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chunk-ZJBXLVSV.jsView on unpkg · L23

60 if (event.toolName === "submit_plan") {

61 return { resumeData: { action: "approved" } };

62 }

63 return { resumeData: "Proceed with your best judgment. Do not ask further questions." };

dist/headless.cjsView file

Lines 1-22javascript

1'use strict';

3var chunkJU3BZYCN_cjs = require('./chunk-JU3BZYCN.cjs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/headless.cjsView on unpkg · L2

7Object.defineProperty(exports, "VALID_MODES", {

8 enumerable:

dist/chunk-KXTU547O.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/chunk-KXTU547O.jsView on unpkg · L3

CHANGELOG.mdView file

455patternName = private_key_rsa severity = critical line = 455 matchedText = GITHUB_A...---"

Critical

Secret Pattern

RSA private key in CHANGELOG.md

CHANGELOG.mdView on unpkg · L455

683patternName = private_key_rsa severity = critical line = 683 matchedText = GITHUB_A...---"

Critical

Secret Pattern

RSA private key in CHANGELOG.md

CHANGELOG.mdView on unpkg · L683

README.mdView file

300patternName = private_key_rsa severity = critical line = 300 matchedText = export G...---"

Critical

Secret Pattern

RSA private key in README.md

README.mdView on unpkg · L300