registry / @decentnetwork/lan / 0.1.272
@decentnetwork/lan@0.1.272
Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection shows an expected networking/VPN tool with privileged operations gated behind explicit CLI commands, not npm lifecycle execution. The scanner persistence and child-process signals correspond to disclosed service/TUN functionality and do not establish a malicious chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs CLI commands such as `agentnet service install`, `agentnet up --real-tun`, or `agentnet bootstrap update`.
Impact
User-authorized network configuration and persistent service installation; no confirmed credential theft, covert exfiltration, or foreign AI-agent control-surface mutation.
Mechanism
Explicit VPN/TUN service setup, peer networking, and validated bootstrap retrieval.
AI rationale
Source inspection shows an expected networking/VPN tool with privileged operations gated behind explicit CLI commands, not npm lifecycle execution. The scanner persistence and child-process signals correspond to disclosed service/TUN functionality and do not establish a malicious chain.
Evidence
package.jsondist/cli/index.jsdist/cli/commands.jsdist/tun/tun-device.jsdist/daemon/server.jsdist/config/loader.jsdist/ui/server.js
Network endpoints5
beagle.chat/assets/bgservers.jsonio.beagle.chatpushapi.beagle.chat/push-api/push-messagewww.callpass.cn/push-api/push-messagetokyo.fi.chat:3004/push-api/push-message
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has only prepublishOnly; no install lifecycle hook.
- dist/cli/index.js exposes service creation only through explicit `agentnet service install`.
- dist/cli/commands.js writes persistence artifacts only inside that explicit command.
- dist/tun/tun-device.js launches the bundled helper only for user-selected real TUN mode.
- Bootstrap feed fetch is explicit, HTTPS-only, and validates hosts, ports, and keys.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
CopyleftLicense
Source & flagged code
8 flaggeddist/ui/server.jsView file
55async function revealInFileManager(filePath) {
L56: const { spawn } = await import("node:child_process");
L57: const run = (cmd, args) => new Promise((resolve) => {
High
14//
L15: import http from "node:http";
L16: import net from "node:net";
...
L45: * root either opens in root's own (invisible) session or is refused. On
L46: * macOS the fix is `launchctl asuser <uid>` to hop into the logged-in
L47: * user's Aqua session; elsewhere we drop to `SUDO_USER` with `sudo -u`.
...
L55: async function revealInFileManager(filePath) {
L56: const { spawn } = await import("node:child_process");
L57: const run = (cmd, args) => new Promise((resolve) => {
...
L66: child.on("error", (e) => resolve({ ok: false, error: `${cmd}: ${e.message}` }));
L67: // Windows Explorer returns exit code 1 even on success, so treat spawn
L68: // without an 'error' event as success rather than gating on the code.
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/ui/server.jsView on unpkg · L14dist/tun/route-manager.jsView file
Findings
1 Critical4 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/daemon/server.js
HighChild Processdist/ui/server.js
HighShelldist/tun/route-manager.js
HighCross File Remote Execution Contextdist/cli/commands.js
HighTrigger Reachable Persistencedist/cli/commands.js
MediumDynamic Requiredist/ui/desktop/vendor/react-dom.production.min.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/ui/server.js
MediumShips Native Binarybin/tun-helper-linux-arm64
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @decentnetwork/lan@0.1.272.
See all versions of @decentnetwork/lan for other recorded verdicts.
- Review the evidence and your use of @decentnetwork/lan@0.1.272 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.