registry / rastack / 0.0.40

rastack@0.0.40

AI Security Review

scanned 13h ago · by lpm-firewall-ai

No confirmed malicious install-time or import-time behavior. The package is a user-invoked CLI that can generate deployment files, run configured CI commands, and update itself only through explicit subcommands.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit `rastack init`, `rastack ci`, `rastack update`, or other CLI subcommands

Impact

Can modify the current project or deploy configured AWS resources when explicitly requested; no credential harvesting, covert exfiltration, or AI-agent control-surface mutation found.

Mechanism

User-invoked code generation, deployment orchestration, and self-update

Rationale

Static hints map to normal CLI behavior: user-supplied subcommands invoke local tools, deployment configuration, or package-aligned updates. Source inspection found no lifecycle execution, secret collection, exfiltration endpoint, stealth persistence, destructive payload, or foreign AI-agent configuration mutation.

Evidence

package.jsondist/rastack.jssrc/rastack-update.tssrc/rastack-init.tssrc/rastack-ci.tssrc/deploy/io.tssrc/deploy/ci.tsprovider/wasm.ts.rastack/deploy.json.github/workflows/ci.yml.github/workflows/deploy-backend.yml

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

`package.json` has no preinstall/install/postinstall/prepare hook.
`dist/rastack.js` dispatches only explicit CLI subcommands.
`src/rastack-update.ts` self-updates only when `rastack update` is invoked.
`src/rastack-init.ts` writes deployment files only for explicit `rastack init`.
`src/rastack-ci.ts` executes developer-configured CI steps only for explicit `rastack ci`.
`provider/wasm.ts` dynamically imports the package's own WASM module.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 174 file(s), 744 KB of source, external domains: 127.0.0.1, cli.github.com, www.w3.org

Source & flagged code

5 flagged

dist/deploy/io.jsView file

Lines 36-76javascript

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.configPath = configPath;

42exports.loadConfig = loadConfig;

43exports.saveConfig = saveConfig;

44exports.gitRemoteUrl = gitRemoteUrl;

45exports.canPrompt = canPrompt;

46exports.awsCapture = awsCapture;

47exports.awsRun = awsRun;

48exports.awsAvailable = awsAvailable;

49exports.stackOutput = stackOutput;

50exports.uploadPlaceholder = uploadPlaceholder;

51exports.ghAvailable = ghAvailable;

52exports.ghAuthenticated = ghAuthenticated;

53exports.ghAuthLogin = ghAuthLogin;

54exports.setRepoVariable = setRepoVariable;

55exports.ask = ask;

56exports.withPrompt = withPrompt;

57const child_process_1 = require("child_process");

58const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L56

59const os = __importStar(require("os"));

60const path = __importStar(require("path"));

61const readline = __importStar(require("readline"));

62const workflows_1 = require("./workflows");

63const config_1 = require("./config");

64const zip_1 = require("./zip");

65/** Absolute path to the deploy config for a project root. */

66function configPath(cwd = process.cwd()) {

67 return path.join(cwd, workflows_1.CONFIG_PATH);

68}

69/** Read + normalize the deploy config, or null when it does not exist yet. */

70function loadConfig(cwd = process.cwd()) {

71 const file = configPath(cwd);

72 if (!fs.existsSync(file))

73 return null;

74 const raw = JSON.parse(fs.readFileSync(file, "utf-8"));

75 return (0, config_1.normalizeConfig)(raw);

76}

provider/wasm.tsView file

Lines 1-32typescript

1import { AxiosAdapter, AxiosError, AxiosResponse } from "axios";

2import { RastackEngine, RastackEngineLoader, RastackWasmModule } from "./types";

4/**

5 * Default WASM loader: import the bundle `rastack wasm` generates

6 * (`rastack/wasm/rastack_wasm.js`) and run its init. The indirection through

7 * `new Function` keeps a genuine dynamic `import()` at runtime even when the

8 * package is transpiled to CommonJS, so the consumer's bundler resolves and

9 * code-splits the `.wasm`.

dist/rastack-compile.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * `rastack compile | check | list | urls` — the TypeScript-first replacement for the

5 * old Django `manage.py rastack` command.

6 *

7 * rastack compile [resourcesDir] [outDir] defs → schema.rastack.json + openapi.json

8 * rastack check [resourcesDir] validate the resource graph (exit != 0 on error)

9 * rastack list [resourcesDir] print every resource + its fields/relations

10 * rastack urls [resourcesDir] print the generated /api/{app}/v1/{model}/ routes

11 */

src/rastack-update.tsView file

Lines 1-34typescript

1#!/usr/bin/env node

3/**

4 * `rastack update` — update the CLI in place.

5 *

6 * rastack update [<version>] [--version <v>] [--check] [--dry-run]

7 *

8 * (no args) update to the latest published version

9 * <version> pin a target, e.g. `rastack update 0.0.40`

10 * --check report current vs. latest, install nothing

11 * --dry-run print the npm command that would run, don't run it

12 *

dist/rastack-init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = rastack@0.0.39 matchedIdentity = npm:cmFzdGFjaw:0.0.39 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/rastack-init.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/deploy/io.jsView file

56exports.withPrompt = withPrompt; L57: const child_process_1 = require("child_process"); L58: const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L56

provider/wasm.tsView file

12// eslint-disable-next-line no-new-func L13: new Function("s", "return import(s)") as any; L14:

Low

Eval

Package source references a known benign dynamic code generation pattern.

provider/wasm.tsView on unpkg · L12

dist/rastack-compile.jsView file

12Object.defineProperty(exports, "__esModule", { value: true }); L13: const compile_1 = require("./compile"); L14: const DEFAULT_RESOURCES = "resources";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/rastack-compile.jsView on unpkg · L12

src/rastack-update.tsView file

14* prefix (`~/.rastack`, via the hosted installer). Updating re-runs L15: * `npm install -g rastack@<target>` against that SAME prefix — derived from where L16: * the running CLI lives — so it never scatters a second copy into npm's default ... L19: L20: import { execFileSync } from "child_process"; L21: import { readFileSync } from "fs";

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/rastack-update.tsView on unpkg · L14

dist/rastack-init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/rastack-init.jsView on unpkg

Findings

1 Critical3 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/rastack-init.js

HighChild Processdist/deploy/io.js

HighShell

HighRuntime Package Installsrc/rastack-update.ts

MediumDynamic Requiredist/rastack-compile.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalprovider/wasm.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/deploy/io.jsView file

Lines 36-76javascript

36 __setModuleDefault(result, mod);

37 return result;

38 };

39})();

40Object.defineProperty(exports, "__esModule", { value: true });

41exports.configPath = configPath;

42exports.loadConfig = loadConfig;

43exports.saveConfig = saveConfig;

44exports.gitRemoteUrl = gitRemoteUrl;

45exports.canPrompt = canPrompt;

46exports.awsCapture = awsCapture;

47exports.awsRun = awsRun;

48exports.awsAvailable = awsAvailable;

49exports.stackOutput = stackOutput;

50exports.uploadPlaceholder = uploadPlaceholder;

51exports.ghAvailable = ghAvailable;

52exports.ghAuthenticated = ghAuthenticated;

53exports.ghAuthLogin = ghAuthLogin;

54exports.setRepoVariable = setRepoVariable;

55exports.ask = ask;

56exports.withPrompt = withPrompt;

57const child_process_1 = require("child_process");

58const fs = __importStar(require("fs"));

High

Child Process

Package source references child process execution.

dist/deploy/io.jsView on unpkg · L56

59const os = __importStar(require("os"));

60const path = __importStar(require("path"));

61const readline = __importStar(require("readline"));

62const workflows_1 = require("./workflows");

63const config_1 = require("./config");

64const zip_1 = require("./zip");

65/** Absolute path to the deploy config for a project root. */

66function configPath(cwd = process.cwd()) {

67 return path.join(cwd, workflows_1.CONFIG_PATH);

68}

69/** Read + normalize the deploy config, or null when it does not exist yet. */

70function loadConfig(cwd = process.cwd()) {

71 const file = configPath(cwd);

72 if (!fs.existsSync(file))

73 return null;

74 const raw = JSON.parse(fs.readFileSync(file, "utf-8"));

75 return (0, config_1.normalizeConfig)(raw);

76}

provider/wasm.tsView file

Lines 1-32typescript

1import { AxiosAdapter, AxiosError, AxiosResponse } from "axios";

2import { RastackEngine, RastackEngineLoader, RastackWasmModule } from "./types";

4/**

5 * Default WASM loader: import the bundle `rastack wasm` generates

6 * (`rastack/wasm/rastack_wasm.js`) and run its init. The indirection through

7 * `new Function` keeps a genuine dynamic `import()` at runtime even when the

8 * package is transpiled to CommonJS, so the consumer's bundler resolves and

9 * code-splits the `.wasm`.

dist/rastack-compile.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * `rastack compile | check | list | urls` — the TypeScript-first replacement for the

5 * old Django `manage.py rastack` command.

6 *

7 * rastack compile [resourcesDir] [outDir] defs → schema.rastack.json + openapi.json

8 * rastack check [resourcesDir] validate the resource graph (exit != 0 on error)

9 * rastack list [resourcesDir] print every resource + its fields/relations

10 * rastack urls [resourcesDir] print the generated /api/{app}/v1/{model}/ routes

11 */

src/rastack-update.tsView file

Lines 1-34typescript

1#!/usr/bin/env node

3/**

4 * `rastack update` — update the CLI in place.

5 *

6 * rastack update [<version>] [--version <v>] [--check] [--dry-run]

7 *

8 * (no args) update to the latest published version

9 * <version> pin a target, e.g. `rastack update 0.0.40`

10 * --check report current vs. latest, install nothing

11 * --dry-run print the npm command that would run, don't run it

12 *

dist/rastack-init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/rastack-init.jsView on unpkg