registry / rastack / 0.0.38

rastack@0.0.38

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package exposes user-invoked self-update, local code generation, and opt-in AWS/GitHub deployment tooling; no install-time or import-time execution was found.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit `rastack update`, `rastack init`, `rastack ci`, `rastack deploy`, or other CLI invocation.

Impact

Authorized package updates or project/cloud changes only when the developer invokes the corresponding command.

Mechanism

User-directed CLI subprocesses, project file generation, and optional AWS deployment.

Rationale

Static hints reflect normal CLI/deployment primitives. Direct source inspection found no lifecycle-triggered behavior, credential harvesting, covert network exfiltration, remote payload execution, persistence, or AI-agent control-surface mutation.

Evidence

package.jsonruntime.tssrc/rastack.tssrc/rastack-update.tssrc/rastack-init.tssrc/deploy/io.tssrc/deploy/ci.tsprovider/wasm.ts.rastack/deploy.json.github/workflows/ci.yml.github/workflows/deploy-backend.ymltokens.rastack.jsontokens.csstokens.ts

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

`src/rastack-update.ts` invokes npm only for explicit `rastack update` commands.
`src/rastack-init.ts` writes project deployment config/workflows and invokes AWS only after explicit init flow.
`src/deploy/io.ts` runs fixed `aws` argv via `execFileSync`, not hidden lifecycle code.
`src/rastack.ts` dispatches user-supplied CLI subcommands to package scripts.

Evidence against

`package.json` has no preinstall, install, postinstall, prepare, or publish lifecycle hook.
`runtime.ts` only re-exports library modules; importing it does not execute CLI/deploy code.
No source references AI-agent control directories, shell profiles, SSH material, npm credentials, or exfiltration endpoints.
`provider/wasm.ts` uses dynamic import solely to load the package's generated WASM bundle.
Network schema retrieval is caller-directed URL input in `src/schema-fetch.ts` and `src/schema/fetch-schema.ts`.
Deployment endpoints and AWS resources are derived from explicit project configuration.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 172 file(s), 710 KB of source, external domains: 127.0.0.1, www.w3.org

Source & flagged code

5 flagged

dist/deploy/io.jsView file

Lines 32-72javascript

32 return function (mod) {

33 if (mod && mod.__esModule) return mod;

34 var result = {};

35 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.configPath = configPath;

42exports.loadConfig = loadConfig;

43exports.saveConfig = saveConfig;

44exports.gitRemoteUrl = gitRemoteUrl;

45exports.canPrompt = canPrompt;

46exports.awsCapture = awsCapture;

47exports.awsRun = awsRun;

48exports.awsAvailable = awsAvailable;

49exports.stackOutput = stackOutput;

50exports.uploadPlaceholder = uploadPlaceholder;

51exports.ask = ask;

52exports.withPrompt = withPrompt;

53const child_process_1 = require("child_process");

54const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L52

55const os = __importStar(require("os"));

56const path = __importStar(require("path"));

57const readline = __importStar(require("readline"));

58const workflows_1 = require("./workflows");

59const config_1 = require("./config");

60const zip_1 = require("./zip");

61/** Absolute path to the deploy config for a project root. */

62function configPath(cwd = process.cwd()) {

63 return path.join(cwd, workflows_1.CONFIG_PATH);

64}

65/** Read + normalize the deploy config, or null when it does not exist yet. */

66function loadConfig(cwd = process.cwd()) {

67 const file = configPath(cwd);

68 if (!fs.existsSync(file))

69 return null;

70 const raw = JSON.parse(fs.readFileSync(file, "utf-8"));

71 return (0, config_1.normalizeConfig)(raw);

72}

provider/wasm.tsView file

Lines 1-32typescript

1import { AxiosAdapter, AxiosError, AxiosResponse } from "axios";

2import { RastackEngine, RastackEngineLoader, RastackWasmModule } from "./types";

4/**

5 * Default WASM loader: import the bundle `rastack wasm` generates

6 * (`rastack/wasm/rastack_wasm.js`) and run its init. The indirection through

7 * `new Function` keeps a genuine dynamic `import()` at runtime even when the

8 * package is transpiled to CommonJS, so the consumer's bundler resolves and

9 * code-splits the `.wasm`.

dist/rastack-compile.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * `rastack compile | check | list | urls` — the TypeScript-first replacement for the

5 * old Django `manage.py rastack` command.

6 *

7 * rastack compile [resourcesDir] [outDir] defs → schema.rastack.json + openapi.json

8 * rastack check [resourcesDir] validate the resource graph (exit != 0 on error)

9 * rastack list [resourcesDir] print every resource + its fields/relations

10 * rastack urls [resourcesDir] print the generated /api/{app}/v1/{model}/ routes

11 */

src/rastack-update.tsView file

Lines 1-34typescript

1#!/usr/bin/env node

3/**

4 * `rastack update` — update the CLI in place.

5 *

6 * rastack update [<version>] [--version <v>] [--check] [--dry-run]

7 *

8 * (no args) update to the latest published version

9 * <version> pin a target, e.g. `rastack update 0.0.40`

10 * --check report current vs. latest, install nothing

11 * --dry-run print the npm command that would run, don't run it

12 *

dist/deploy/config.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = rastack@0.0.37 matchedIdentity = npm:cmFzdGFjaw:0.0.37 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/deploy/config.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/deploy/io.jsView file

52exports.withPrompt = withPrompt; L53: const child_process_1 = require("child_process"); L54: const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L52

provider/wasm.tsView file

12// eslint-disable-next-line no-new-func L13: new Function("s", "return import(s)") as any; L14:

Low

Eval

Package source references a known benign dynamic code generation pattern.

provider/wasm.tsView on unpkg · L12

dist/rastack-compile.jsView file

12Object.defineProperty(exports, "__esModule", { value: true }); L13: const compile_1 = require("./compile"); L14: const DEFAULT_RESOURCES = "resources";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/rastack-compile.jsView on unpkg · L12

src/rastack-update.tsView file

14* prefix (`~/.rastack`, via the hosted installer). Updating re-runs L15: * `npm install -g rastack@<target>` against that SAME prefix — derived from where L16: * the running CLI lives — so it never scatters a second copy into npm's default ... L19: L20: import { execFileSync } from "child_process"; L21: import { readFileSync } from "fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/rastack-update.tsView on unpkg · L14

dist/deploy/config.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/deploy/config.jsView on unpkg

Findings

1 Critical3 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/deploy/config.js

HighChild Processdist/deploy/io.js

HighShell

HighRuntime Package Installsrc/rastack-update.ts

MediumDynamic Requiredist/rastack-compile.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalprovider/wasm.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/deploy/io.jsView file

Lines 32-72javascript

32 return function (mod) {

33 if (mod && mod.__esModule) return mod;

34 var result = {};

35 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.configPath = configPath;

42exports.loadConfig = loadConfig;

43exports.saveConfig = saveConfig;

44exports.gitRemoteUrl = gitRemoteUrl;

45exports.canPrompt = canPrompt;

46exports.awsCapture = awsCapture;

47exports.awsRun = awsRun;

48exports.awsAvailable = awsAvailable;

49exports.stackOutput = stackOutput;

50exports.uploadPlaceholder = uploadPlaceholder;

51exports.ask = ask;

52exports.withPrompt = withPrompt;

53const child_process_1 = require("child_process");

54const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L52

55const os = __importStar(require("os"));

56const path = __importStar(require("path"));

57const readline = __importStar(require("readline"));

58const workflows_1 = require("./workflows");

59const config_1 = require("./config");

60const zip_1 = require("./zip");

61/** Absolute path to the deploy config for a project root. */

62function configPath(cwd = process.cwd()) {

63 return path.join(cwd, workflows_1.CONFIG_PATH);

64}

65/** Read + normalize the deploy config, or null when it does not exist yet. */

66function loadConfig(cwd = process.cwd()) {

67 const file = configPath(cwd);

68 if (!fs.existsSync(file))

69 return null;

70 const raw = JSON.parse(fs.readFileSync(file, "utf-8"));

71 return (0, config_1.normalizeConfig)(raw);

72}

provider/wasm.tsView file

Lines 1-32typescript

1import { AxiosAdapter, AxiosError, AxiosResponse } from "axios";

2import { RastackEngine, RastackEngineLoader, RastackWasmModule } from "./types";

4/**

5 * Default WASM loader: import the bundle `rastack wasm` generates

6 * (`rastack/wasm/rastack_wasm.js`) and run its init. The indirection through

7 * `new Function` keeps a genuine dynamic `import()` at runtime even when the

8 * package is transpiled to CommonJS, so the consumer's bundler resolves and

9 * code-splits the `.wasm`.

dist/rastack-compile.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * `rastack compile | check | list | urls` — the TypeScript-first replacement for the

5 * old Django `manage.py rastack` command.

6 *

7 * rastack compile [resourcesDir] [outDir] defs → schema.rastack.json + openapi.json

8 * rastack check [resourcesDir] validate the resource graph (exit != 0 on error)

9 * rastack list [resourcesDir] print every resource + its fields/relations

10 * rastack urls [resourcesDir] print the generated /api/{app}/v1/{model}/ routes

11 */

src/rastack-update.tsView file

Lines 1-34typescript

1#!/usr/bin/env node

3/**

4 * `rastack update` — update the CLI in place.

5 *

6 * rastack update [<version>] [--version <v>] [--check] [--dry-run]

7 *

8 * (no args) update to the latest published version

9 * <version> pin a target, e.g. `rastack update 0.0.40`

10 * --check report current vs. latest, install nothing

11 * --dry-run print the npm command that would run, don't run it

12 *

dist/deploy/config.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/deploy/config.jsView on unpkg