registry / @decentnetwork/lan / 0.1.286
@decentnetwork/lan@0.1.286
Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe flagged execution and persistence primitives implement the package's virtual-LAN CLI and are not reached by an npm install lifecycle hook. Static inspection found no concrete exfiltration, payload staging, stealth persistence, or unconsented control-surface mutation.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit agentnet CLI commands such as service install or network setup.
Impact
Can create a virtual network interface or persistent service when the user explicitly requests it with required privileges.
Mechanism
User-invoked virtual-network, routing, and service management.
AI rationale
The flagged execution and persistence primitives implement the package's virtual-LAN CLI and are not reached by an npm install lifecycle hook. Static inspection found no concrete exfiltration, payload staging, stealth persistence, or unconsented control-surface mutation.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package contains privileged network and service-management capabilities.
- Its service installer can create persistent root-level platform services, but it is exposed through an explicit CLI command.
- The UI launches operating-system file-manager commands only for a local user action.
- The console process launcher is limited to clipboard utilities.
- The daemon's shell use quotes restart arguments before invoking a shell.
- The manifest has only a prepublish-only hook, not an install-time hook.
Evidence against
- No preinstall, install, or postinstall script runs when consumers install the package.
- The persistence and system changes are named, user-invoked CLI features of a virtual-LAN tool.
- No source evidence showed credential harvesting, secret exfiltration, remote payload download, or AI-agent configuration mutation.
- The local UI defaults to loopback binding.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
9 flaggeddist/ui/server.jsView file
55async function revealInFileManager(filePath) {
L56: const { spawn } = await import("node:child_process");
L57: const run = (cmd, args) => new Promise((resolve) => {
High
dist/tun/route-manager.jsView file
3* Linux uses `ip` (iproute2), macOS uses `ifconfig` + `route`, and
L4: * Windows uses the built-in NetTCPIP PowerShell cmdlets.
L5: */
High
dist/ui/desktop/vendor/react-dom.production.min.jsView file
Findings
1 Critical5 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/daemon/server.js
HighChild Processdist/ui/server.js
HighShelldist/tun/route-manager.js
HighCross File Remote Execution Contextdist/cli/commands.js
HighTrigger Reachable Persistencedist/cli/commands.js
HighSemantic Analysis Limiteddist/console/console.js#virtual:normalized:round1
MediumDynamic Requiredist/ui/desktop/vendor/react-dom.production.min.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli/commands.js
MediumShips Native Binarybin/tun-helper-linux-arm64
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @decentnetwork/lan@0.1.286.
See all versions of @decentnetwork/lan for other recorded verdicts.
- Review the evidence and your use of @decentnetwork/lan@0.1.286 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.