registry / rastack / 0.0.37

rastack@0.0.37

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious install-time or import-time attack surface. Explicit CLI commands can scaffold project workflows, self-update the package, and run developer-selected local tooling.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `rastack init`, `rastack update`, or another CLI subcommand.

Impact

May write deployment configuration and GitHub Actions workflows only when the user invokes setup; no unconsented persistence or exfiltration is established.

Mechanism

Explicit developer CLI orchestration and project scaffolding.

Rationale

Source inspection shows a developer CLI with explicit self-update, AWS deployment, workflow scaffolding, and local module-loading features. It has no lifecycle hook, covert execution, credential collection, exfiltration, or unconsented AI-agent/control-surface mutation.

Evidence

package.jsonsrc/rastack.tssrc/rastack-init.tssrc/rastack-update.tssrc/rastack-ci.tssrc/deploy/io.tssrc/deploy/workflows.tssrc/tokens/compile.tsprovider/wasm.ts.rastack/deploy.json.github/workflows/ci.yml.github/workflows/deploy-backend.yml

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for block

`src/rastack-init.ts` explicitly scaffolds GitHub Actions and can invoke AWS deployment commands.
`src/rastack-update.ts` explicitly runs `npm install -g rastack@...` for self-update.
`src/tokens/compile.ts` requires a user-selected local token module.

Evidence against

`package.json` has no preinstall, install, postinstall, or other lifecycle hook.
CLI execution requires an explicit `rastack` subcommand.
AWS, npm, git, Cargo, and cloud actions are user-invoked developer tooling.
No source evidence of credential harvesting, secret-file reads, or network exfiltration.
No AI-agent configuration paths or foreign control-surface mutation were found.
No binary/native payload files were present.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 172 file(s), 706 KB of source, external domains: 127.0.0.1, www.w3.org

Source & flagged code

5 flagged

dist/deploy/io.jsView file

Lines 32-72javascript

32 return function (mod) {

33 if (mod && mod.__esModule) return mod;

34 var result = {};

35 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.configPath = configPath;

42exports.loadConfig = loadConfig;

43exports.saveConfig = saveConfig;

44exports.gitRemoteUrl = gitRemoteUrl;

45exports.canPrompt = canPrompt;

46exports.awsCapture = awsCapture;

47exports.awsRun = awsRun;

48exports.awsAvailable = awsAvailable;

49exports.stackOutput = stackOutput;

50exports.uploadPlaceholder = uploadPlaceholder;

51exports.ask = ask;

52exports.withPrompt = withPrompt;

53const child_process_1 = require("child_process");

54const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L52

55const os = __importStar(require("os"));

56const path = __importStar(require("path"));

57const readline = __importStar(require("readline"));

58const workflows_1 = require("./workflows");

59const config_1 = require("./config");

60const zip_1 = require("./zip");

61/** Absolute path to the deploy config for a project root. */

62function configPath(cwd = process.cwd()) {

63 return path.join(cwd, workflows_1.CONFIG_PATH);

64}

65/** Read + normalize the deploy config, or null when it does not exist yet. */

66function loadConfig(cwd = process.cwd()) {

67 const file = configPath(cwd);

68 if (!fs.existsSync(file))

69 return null;

70 const raw = JSON.parse(fs.readFileSync(file, "utf-8"));

71 return (0, config_1.normalizeConfig)(raw);

72}

provider/wasm.tsView file

Lines 1-32typescript

1import { AxiosAdapter, AxiosError, AxiosResponse } from "axios";

2import { RastackEngine, RastackEngineLoader, RastackWasmModule } from "./types";

4/**

5 * Default WASM loader: import the bundle `rastack wasm` generates

6 * (`rastack/wasm/rastack_wasm.js`) and run its init. The indirection through

7 * `new Function` keeps a genuine dynamic `import()` at runtime even when the

8 * package is transpiled to CommonJS, so the consumer's bundler resolves and

9 * code-splits the `.wasm`.

dist/rastack-compile.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * `rastack compile | check | list | urls` — the TypeScript-first replacement for the

5 * old Django `manage.py rastack` command.

6 *

7 * rastack compile [resourcesDir] [outDir] defs → schema.rastack.json + openapi.json

8 * rastack check [resourcesDir] validate the resource graph (exit != 0 on error)

9 * rastack list [resourcesDir] print every resource + its fields/relations

10 * rastack urls [resourcesDir] print the generated /api/{app}/v1/{model}/ routes

11 */

src/rastack-update.tsView file

Lines 1-34typescript

1#!/usr/bin/env node

3/**

4 * `rastack update` — update the CLI in place.

5 *

6 * rastack update [<version>] [--version <v>] [--check] [--dry-run]

7 *

8 * (no args) update to the latest published version

9 * <version> pin a target, e.g. `rastack update 0.0.40`

10 * --check report current vs. latest, install nothing

11 * --dry-run print the npm command that would run, don't run it

12 *

dist/rastack.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = rastack@0.0.35 matchedIdentity = npm:cmFzdGFjaw:0.0.35 similarity = 0.892 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/rastack.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/deploy/io.jsView file

52exports.withPrompt = withPrompt; L53: const child_process_1 = require("child_process"); L54: const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L52

provider/wasm.tsView file

12// eslint-disable-next-line no-new-func L13: new Function("s", "return import(s)") as any; L14:

Low

Eval

Package source references a known benign dynamic code generation pattern.

provider/wasm.tsView on unpkg · L12

dist/rastack-compile.jsView file

12Object.defineProperty(exports, "__esModule", { value: true }); L13: const compile_1 = require("./compile"); L14: const DEFAULT_RESOURCES = "resources";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/rastack-compile.jsView on unpkg · L12

src/rastack-update.tsView file

14* prefix (`~/.rastack`, via the hosted installer). Updating re-runs L15: * `npm install -g rastack@<target>` against that SAME prefix — derived from where L16: * the running CLI lives — so it never scatters a second copy into npm's default ... L19: L20: import { execFileSync } from "child_process"; L21: import { readFileSync } from "fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/rastack-update.tsView on unpkg · L14

dist/rastack.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/rastack.jsView on unpkg

Findings

1 Critical3 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/rastack.js

HighChild Processdist/deploy/io.js

HighShell

HighRuntime Package Installsrc/rastack-update.ts

MediumDynamic Requiredist/rastack-compile.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalprovider/wasm.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/deploy/io.jsView file

Lines 32-72javascript

32 return function (mod) {

33 if (mod && mod.__esModule) return mod;

34 var result = {};

35 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.configPath = configPath;

42exports.loadConfig = loadConfig;

43exports.saveConfig = saveConfig;

44exports.gitRemoteUrl = gitRemoteUrl;

45exports.canPrompt = canPrompt;

46exports.awsCapture = awsCapture;

47exports.awsRun = awsRun;

48exports.awsAvailable = awsAvailable;

49exports.stackOutput = stackOutput;

50exports.uploadPlaceholder = uploadPlaceholder;

51exports.ask = ask;

52exports.withPrompt = withPrompt;

53const child_process_1 = require("child_process");

54const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L52

55const os = __importStar(require("os"));

56const path = __importStar(require("path"));

57const readline = __importStar(require("readline"));

58const workflows_1 = require("./workflows");

59const config_1 = require("./config");

60const zip_1 = require("./zip");

61/** Absolute path to the deploy config for a project root. */

62function configPath(cwd = process.cwd()) {

63 return path.join(cwd, workflows_1.CONFIG_PATH);

64}

65/** Read + normalize the deploy config, or null when it does not exist yet. */

66function loadConfig(cwd = process.cwd()) {

67 const file = configPath(cwd);

68 if (!fs.existsSync(file))

69 return null;

70 const raw = JSON.parse(fs.readFileSync(file, "utf-8"));

71 return (0, config_1.normalizeConfig)(raw);

72}

provider/wasm.tsView file

Lines 1-32typescript

1import { AxiosAdapter, AxiosError, AxiosResponse } from "axios";

2import { RastackEngine, RastackEngineLoader, RastackWasmModule } from "./types";

4/**

5 * Default WASM loader: import the bundle `rastack wasm` generates

6 * (`rastack/wasm/rastack_wasm.js`) and run its init. The indirection through

7 * `new Function` keeps a genuine dynamic `import()` at runtime even when the

8 * package is transpiled to CommonJS, so the consumer's bundler resolves and

9 * code-splits the `.wasm`.

dist/rastack-compile.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * `rastack compile | check | list | urls` — the TypeScript-first replacement for the

5 * old Django `manage.py rastack` command.

6 *

7 * rastack compile [resourcesDir] [outDir] defs → schema.rastack.json + openapi.json

8 * rastack check [resourcesDir] validate the resource graph (exit != 0 on error)

9 * rastack list [resourcesDir] print every resource + its fields/relations

10 * rastack urls [resourcesDir] print the generated /api/{app}/v1/{model}/ routes

11 */

src/rastack-update.tsView file

Lines 1-34typescript

1#!/usr/bin/env node

3/**

4 * `rastack update` — update the CLI in place.

5 *

6 * rastack update [<version>] [--version <v>] [--check] [--dry-run]

7 *

8 * (no args) update to the latest published version

9 * <version> pin a target, e.g. `rastack update 0.0.40`

10 * --check report current vs. latest, install nothing

11 * --dry-run print the npm command that would run, don't run it

12 *

dist/rastack.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/rastack.jsView on unpkg