registry / nitro-nightly / 3.0.1-20260711-223101-ff018c15

nitro-nightly@3.0.1-20260711-223101-ff018c15

Build and Deploy Universal JavaScript Servers

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Process execution is limited to explicit CLI commands for documentation, deployment, and local preview; generated files are deployment artifacts in the user-selected project output.

Static reason

One or more suspicious static signals were detected.

Trigger

User explicitly runs `nitro docs`, `nitro deploy`, or preview/build workflows.

Impact

Expected project build, preview, documentation, or deployment behavior; no unconsented install-time action found.

Mechanism

User-invoked CLI orchestration and deployment artifact generation.

Rationale

Direct source inspection found no lifecycle execution or concrete malicious chain. Static signals are explained by a server build/deployment framework and explicit CLI features.

Evidence

package.jsondist/cli/index.mjsdist/cli/_chunks/docs.mjsdist/cli/_chunks/deploy.mjsdist/_chunks/nitro2.mjsdist/_presets.mjsdist/THIRD-PARTY-LICENSES.md.gz

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

`dist/cli/_chunks/docs.mjs` runs package-manager commands only when the user invokes `nitro docs`.
`dist/cli/_chunks/deploy.mjs` executes the configured deploy command only when the user invokes `nitro deploy`.
`dist/_chunks/nitro2.mjs` spawns a local preview-server command during explicit preview use.

Evidence against

`package.json` has no preinstall, install, postinstall, prepare, or publish lifecycle hook.
`dist/cli/index.mjs` only dispatches explicitly selected CLI subcommands via dynamic imports.
`dist/_presets.mjs` writes deployment configuration into configured project output directories, not user credential or agent-control paths.
No inspected source showed credential harvesting, secret exfiltration, stealth persistence, remote-payload execution, or AI-agent configuration mutation.
`dist/THIRD-PARTY-LICENSES.md.gz` decompresses to bundled-dependency license text, not an opaque payload.
Network literals in `dist/_presets.mjs` are Deno externals and documentation URLs, not outbound package callbacks.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 141 file(s), 1.67 MB of source, external domains: blogs.msdn.com, cdn.jsdelivr.net, cdnjs.cloudflare.com, foo.com, github.com, rollupjs.org

Source & flagged code

10 flagged

dist/_presets.mjsView file

Lines 142-182javascript

142 });

143 for (const route of routes) if (route.path !== "/*") route.path = joinURL(nitro.options.baseURL, route.path);

144 const deployManifest = {

145 version: 1,

146 routes,

147 imageSettings: nitro.options.awsAmplify?.imageSettings || void 0,

148 computeResources: nitro.options.static ? void 0 : [{

149 name: "default",

150 entrypoint: "server.js",

151 runtime: nitro.options.awsAmplify?.runtime || "nodejs20.x"

152 }],

153 framework: {

154 name: nitro.options.framework.name || "nitro",

155 version: nitro.options.framework.version || "0.0.0"

156 }

157 };

158 await writeFile(resolve(outDir, "deploy-manifest.json"), JSON.stringify(deployManifest, null, 2));

159 if (!nitro.options.static) await writeFile(resolve(outDir, "compute/default/server.js"), `import("./index.mjs")`);

160}

161var preset_default$25 = [defineNitroPreset({

162 entry: "./aws-amplify/runtime/aws-amplify",

163 manifest: { deploymentId: process.env.AWS_JOB_ID },

164 serveStatic: true,

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/_presets.mjsView on unpkg · L162

165 output: {

166 dir: "{{ rootDir }}/.amplify-hosting",

167 serverDir: "{{ output.dir }}/compute/default",

168 publicDir: "{{ output.dir }}/static{{ baseURL }}"

169 },

170 commands: { preview: "node ./compute/default/server.js" },

171 hooks: { async compiled(nitro) {

172 await writeAmplifyFiles(nitro);

173 } }

174}, {

175 name: "aws-amplify",

176 stdName: "aws_amplify"

177})];

178var preset_default$24 = [defineNitroPreset({

179 entry: "./aws-lambda/runtime/aws-lambda",

180 awsLambda: { streaming: false },

181 hooks: { "rollup:before": (nitro, rollupConfig) => {

182 if (nitro.options.awsLambda?.streaming) rollupConfig.input += "-streaming";

Lines 701-741javascript

701 extends: "cloudflare-module",

702 entry: "./cloudflare/runtime/cloudflare-durable"

703 }, { name: "cloudflare-durable" }),

704 cloudflareDev

705];

706const builtnNodeModules = [

707 "node:_http_agent",

708 "node:_http_common",

709 "node:_http_outgoing"

dist/_libs/nypm+tinyexec.mjsView file

Lines 106-146javascript

106 e = a;

107 i = O(e, n);

108 }

109 if (i === null || !C.test(i)) {

110 const r = i !==

dist/_libs/pluginutils.mjsView file

Lines 92-132javascript

92 const { file, postfix } = splitFileAndPostfix(url);

93 return `${isWindows ? slash(file) : file}?${queryToInject}${postfix[0] === "?" ?

dist/_dev.mjsView file

Lines 121-161javascript

121 ${file}

122 </div>

123</body>

124</html>`;

125 });

126}

127const monacoUrl = `https://cdnjs.cloudflare.com/ajax/libs/monaco-editor/0.30.0/min`;

128const vsUrl = `${

dist/_build/common.mjsView file

75function cwd$1() { L76: if (typeof process !== "undefined" && typeof process.cwd === "function") return process.cwd().replace(/\\/g, "/"); L77: return "/"; ... L210: "buffer", L211: "child_process", L212: "cluster", ... L461: assert.ok(isImport === false); L462: return `Invalid "exports" main target ${JSON.stringify(target)} defined in the package config ${packagePath}package.json${base ? ` imported from ${base}` : ""}${relatedError ? "; t... L463: } ... L513: try { L514: parsed = JSON.parse(string); L515: } catch (error_) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/_build/common.mjsView on unpkg · L75

dist/THIRD-PARTY-LICENSES.md.gzView file

•path = dist/THIRD-PARTY-LICENSES.md.gz kind = high_entropy_blob sizeBytes = 6635 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/THIRD-PARTY-LICENSES.md.gzView on unpkg

•path = dist/THIRD-PARTY-LICENSES.md.gz kind = compressed_blob sizeBytes = 6635 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/THIRD-PARTY-LICENSES.md.gzView on unpkg

dist/docs/0.docs/3.routing.mdView file

Lines 449-489markdown

449`swr: true|number` is shortcut for `cache: { swr: true, maxAge: number }`

450</note>

451

452You can set route rules in the `nitro.routeRules` options.

453

454```ts [nitro.config.ts]

455import { defineConfig } from "nitro";

456

457export default defineConfig({

Source & flagged code

10 flagged · loading source

dist/_presets.mjsView file

721"node:buffer", L722: "node:child_process", L723: "node:cluster",

High

Child Process

Package source references child process execution.

dist/_presets.mjsView on unpkg · L721

162Cross-file remote execution chain: dist/_presets.mjs spawns dist/_build/common.mjs; helper contains network access plus dynamic code execution. L162: entry: "./aws-amplify/runtime/aws-amplify", L163: manifest: { deploymentId: process.env.AWS_JOB_ID }, L164: serveStatic: true, ... L185: function prettyPath(p, highlight = true) { L186: p = relative$1(process.cwd(), p); L187: return highlight ? colors.cyan(p) : p; ... L198: try { L199: const currentNodeVersion = JSON.parse(await fsp.readFile(join$1(nitro.options.rootDir, "package.json"), "utf8")).engines.node; L200: if (supportedNodeVersions.has(currentNodeVersion)) nodeVersion = currentNodeVersion; ... L326: "node:diagnostics_channel", L327: "node:dns", L328: "node:dns/promises",

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/_presets.mjsView on unpkg · L162

dist/_libs/nypm+tinyexec.mjsView file

126]; L127: e = n.env?.comspec ?? "cmd.exe"; L128: n = {

High

Shell

Package source references shell execution.

dist/_libs/nypm+tinyexec.mjsView on unpkg · L126

dist/_libs/pluginutils.mjsView file

112function evalValue(rawValue) { L113: return new Function(` L114: var console, exports, global, module, process, require

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/_libs/pluginutils.mjsView on unpkg · L112

dist/_dev.mjsView file

141setTimeout(() => { L142: require(['vs/editor/editor.main'], function () { L143: monaco.editor.create(document.getElementById('editor'), ${JSON.stringify(options)})

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/_dev.mjsView on unpkg · L141

dist/_build/common.mjsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/_build/common.mjsView on unpkg · L75

dist/THIRD-PARTY-LICENSES.md.gzView file

•path = dist/THIRD-PARTY-LICENSES.md.gz kind = high_entropy_blob sizeBytes = 6635 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/THIRD-PARTY-LICENSES.md.gzView on unpkg

•path = dist/THIRD-PARTY-LICENSES.md.gz kind = compressed_blob sizeBytes = 6635 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/THIRD-PARTY-LICENSES.md.gzView on unpkg

dist/docs/0.docs/3.routing.mdView file

469patternName = generic_password severity = medium line = 469 matchedText = '/admin/...} },

Medium

Secret Pattern

Hardcoded password in dist/docs/0.docs/3.routing.md

dist/docs/0.docs/3.routing.mdView on unpkg · L469

614patternName = generic_password severity = medium line = 614 matchedText = password...et',

Medium

Secret Pattern

Hardcoded password in dist/docs/0.docs/3.routing.md

dist/docs/0.docs/3.routing.mdView on unpkg · L614

Findings

4 High7 Medium6 Low

HighChild Processdist/_presets.mjs

HighShelldist/_libs/nypm+tinyexec.mjs

HighCross File Remote Execution Contextdist/_presets.mjs

HighShips High Entropy Blobdist/THIRD-PARTY-LICENSES.md.gz

MediumDynamic Requiredist/_dev.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Compressed Blobdist/THIRD-PARTY-LICENSES.md.gz

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/docs/0.docs/3.routing.md

LowScripts Present

LowEvaldist/_libs/pluginutils.mjs

LowWeak Cryptodist/_build/common.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

dist/_presets.mjsView file

Lines 142-182javascript

142 });

143 for (const route of routes) if (route.path !== "/*") route.path = joinURL(nitro.options.baseURL, route.path);

144 const deployManifest = {

145 version: 1,

146 routes,

147 imageSettings: nitro.options.awsAmplify?.imageSettings || void 0,

148 computeResources: nitro.options.static ? void 0 : [{

149 name: "default",

150 entrypoint: "server.js",

151 runtime: nitro.options.awsAmplify?.runtime || "nodejs20.x"

152 }],

153 framework: {

154 name: nitro.options.framework.name || "nitro",

155 version: nitro.options.framework.version || "0.0.0"

156 }

157 };

158 await writeFile(resolve(outDir, "deploy-manifest.json"), JSON.stringify(deployManifest, null, 2));

159 if (!nitro.options.static) await writeFile(resolve(outDir, "compute/default/server.js"), `import("./index.mjs")`);

160}

161var preset_default$25 = [defineNitroPreset({

162 entry: "./aws-amplify/runtime/aws-amplify",

163 manifest: { deploymentId: process.env.AWS_JOB_ID },

164 serveStatic: true,

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/_presets.mjsView on unpkg · L162

165 output: {

166 dir: "{{ rootDir }}/.amplify-hosting",

167 serverDir: "{{ output.dir }}/compute/default",

168 publicDir: "{{ output.dir }}/static{{ baseURL }}"

169 },

170 commands: { preview: "node ./compute/default/server.js" },

171 hooks: { async compiled(nitro) {

172 await writeAmplifyFiles(nitro);

173 } }

174}, {

175 name: "aws-amplify",

176 stdName: "aws_amplify"

177})];

178var preset_default$24 = [defineNitroPreset({

179 entry: "./aws-lambda/runtime/aws-lambda",

180 awsLambda: { streaming: false },

181 hooks: { "rollup:before": (nitro, rollupConfig) => {

182 if (nitro.options.awsLambda?.streaming) rollupConfig.input += "-streaming";

Lines 701-741javascript

701 extends: "cloudflare-module",

702 entry: "./cloudflare/runtime/cloudflare-durable"

703 }, { name: "cloudflare-durable" }),

704 cloudflareDev

705];

706const builtnNodeModules = [

707 "node:_http_agent",

708 "node:_http_common",

709 "node:_http_outgoing"

dist/_libs/nypm+tinyexec.mjsView file

Lines 106-146javascript

106 e = a;

107 i = O(e, n);

108 }

109 if (i === null || !C.test(i)) {

110 const r = i !==

dist/_libs/pluginutils.mjsView file

Lines 92-132javascript

92 const { file, postfix } = splitFileAndPostfix(url);

93 return `${isWindows ? slash(file) : file}?${queryToInject}${postfix[0] === "?" ?

dist/_dev.mjsView file

Lines 121-161javascript

121 ${file}

122 </div>

123</body>

124</html>`;

125 });

126}

127const monacoUrl = `https://cdnjs.cloudflare.com/ajax/libs/monaco-editor/0.30.0/min`;

128const vsUrl = `${

dist/_build/common.mjsView file

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/_build/common.mjsView on unpkg · L75

dist/THIRD-PARTY-LICENSES.md.gzView file

•path = dist/THIRD-PARTY-LICENSES.md.gz kind = high_entropy_blob sizeBytes = 6635 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/THIRD-PARTY-LICENSES.md.gzView on unpkg

•path = dist/THIRD-PARTY-LICENSES.md.gz kind = compressed_blob sizeBytes = 6635 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/THIRD-PARTY-LICENSES.md.gzView on unpkg

dist/docs/0.docs/3.routing.mdView file

Lines 449-489markdown

449`swr: true|number` is shortcut for `cache: { swr: true, maxAge: number }`

450</note>

451

452You can set route rules in the `nitro.routeRules` options.

453

454```ts [nitro.config.ts]

455import { defineConfig } from "nitro";

456

457export default defineConfig({