@decentnetwork/lan
Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.
This report shows the evidence for @decentnetwork/lan@0.1.312. 1 of 60 known versions is blocked or flagged. The newest version, 0.1.314, is allowed. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiBy default, `agentnet init` uses the configured Carrier identity to send friend requests to publisher-selected DORA targets. Although this supports the package's stated network-joining purpose and can be skipped with `--no-dora`, the policy classifies default account actions toward publisher-chosen targets as malicious.
Static reason
One or more suspicious static signals were detected.
Trigger
Run `agentnet init` without `--no-dora` when no config already exists.
Impact
The user's Carrier identity performs network-joining actions toward targets chosen by the publisher without an opt-in; the firewall policy treats this default account action as malicious.
Mechanism
The command loads the configured Carrier identity and sends friend requests to the package's built-in DORA addresses, initiating enrollment with publisher-selected targets.
Attack narrative
A first-run `agentnet init` sends friend requests from the user's Carrier identity to three DORA addresses shipped by the publisher. This happens by default; `--no-dora` is an opt-out. Under the review policy, the default account action toward publisher-selected targets is malicious even though joining a DORA supports the package's virtual-LAN purpose.
AI rationale
By default, `agentnet init` uses the configured Carrier identity to send friend requests to publisher-selected DORA targets. Although this supports the package's stated network-joining purpose and can be skipped with `--no-dora`, the policy classifies default account actions toward publisher-chosen targets as malicious.
Evidence
dist/cli/index.jsdist/cli/commands.jsconfig/default-doras.yaml~/.agentnet/config.yamlconfigured Carrier data directory/keypair.json
Network endpoints3
Carrier address NsuN81dZdEoyvwEFgWaHkT8SPJB6UWeRmdYcCGFV5CdbbPXoK2RMCarrier address ajg1ZMBw86UyujmEJzqKSCbi3wwEtg6tdGFTdESakyqujyxmqJZKCarrier address MAW2eBqBuQ6SmaXTrnZRRayQjAj3aLatwPy4xmBp7spnJeV569op
Decision evidence
public snapshotAI called this Malicious at 87.0% confidence as Malware with low false-positive risk.
Evidence for block
- The `init` command enables DORA friending by default; users must pass `--no-dora` to skip it.
- On first initialization, the code selects configured built-in DORAs and sends them friend requests.
- The request helper opens a Carrier peer using the configured local keypair, then sends friend requests to each target address.
- The package ships three publisher-selected DORA addresses for automatic enrollment.
Evidence against
- The package describes itself as a Carrier-based private virtual LAN, and DORA registries serve that network-joining purpose.
- The behavior is reached through the explicit `init` command; no install lifecycle hook is declared.
- The CLI option describes the friend requests and offers `--no-dora`, though the default is enabled.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
8 flaggeddist/ui/server.jsView file
55async function revealInFileManager(filePath) {
L56: const { spawn } = await import("node:child_process");
L57: const run = (cmd, args) => new Promise((resolve) => {
High
dist/tun/route-manager.jsView file
3* Linux uses `ip` (iproute2), macOS uses `ifconfig` + `route`, and
L4: * Windows uses the built-in NetTCPIP PowerShell cmdlets.
L5: */
High
dist/ui/desktop/vendor/react-dom.production.min.jsView file
Findings
5 High6 Medium6 Low
HighChild Processdist/ui/server.js
HighShelldist/tun/route-manager.js
HighCross File Remote Execution Contextdist/cli/commands.js
HighTrigger Reachable Persistencedist/cli/commands.js
HighSemantic Analysis Limiteddist/console/console.js#virtual:normalized:round1
MediumDynamic Requiredist/ui/desktop/vendor/react-dom.production.min.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli/commands.js
MediumShips Native Binarybin/tun-helper-linux-arm64
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @decentnetwork/lan@0.1.312.
The versions list below shows the verdict for each recorded version.
- Avoid installing @decentnetwork/lan@0.1.312. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.