registry / @decentnetwork/lan / 0.1.308
@decentnetwork/lan@0.1.308
Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe inspected flagged behavior serves the package’s virtual-LAN purpose, and persistent service setup is behind an explicit command. The `prepublishOnly` script is a build and verification step, not an install hook.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands or daemon startup; service persistence requires invoking the service-install command.
Impact
No evidence of credential theft, unrelated data collection, hidden persistence or concealed remote code execution.
Mechanism
Peer networking and route management support the LAN; initialization sends one-time requests to configured default Dora peers, while the UI can reveal a selected file in the file manager.
AI rationale
The inspected flagged behavior serves the package’s virtual-LAN purpose, and persistent service setup is behind an explicit command. The `prepublishOnly` script is a build and verification step, not an install hook.
Evidence
/etc/systemd/system/agentnet.service~/.agentnet/config.yaml
Network endpoints2
ens-gateway.beaglechat.workers.devbeagle.chat
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is `prepublishOnly`, which builds and verifies package artifacts.
- Default Dora friend requests occur in `agentnet init` to join the shared network; the code describes them as one-time and best-effort.
- New friend requests are queued for manual approval by default.
- Service installation writes a named AgentNet service or startup task through an explicit CLI command.
Evidence against
- The package provides a private virtual LAN, matching its peer, route-management and service features.
- The flagged child-process use in the UI reveals a downloaded file in the operating system’s file manager.
- The inspected network lookup resolves user-supplied names through the documented Beagles gateway.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
9 flaggeddist/ui/server.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @decentnetwork/lan@0.1.300
matchedIdentity = npm:QGRlY2VudG5ldHdvcmsvbGFu:0.1.300
similarity = 0.852
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/ui/server.jsView on unpkg55async function revealInFileManager(filePath) {
L56: const { spawn } = await import("node:child_process");
L57: const run = (cmd, args) => new Promise((resolve) => {
High
dist/tun/route-manager.jsView file
3* Linux uses `ip` (iproute2), macOS uses `ifconfig` + `route`, and
L4: * Windows uses the built-in NetTCPIP PowerShell cmdlets.
L5: */
Findings
1 Critical5 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/ui/server.js
HighChild Processdist/ui/server.js
HighShelldist/tun/route-manager.js
HighCross File Remote Execution Contextdist/cli/commands.js
HighTrigger Reachable Persistencedist/cli/commands.js
HighSemantic Analysis Limiteddist/console/console.js#virtual:normalized:round1
MediumDynamic Requiredist/ui/desktop/vendor/react-dom.production.min.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli/commands.js
MediumShips Native Binarybin/tun-helper-linux-arm64
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @decentnetwork/lan@0.1.308.
See all versions of @decentnetwork/lan for other recorded verdicts.
- Review the evidence and your use of @decentnetwork/lan@0.1.308 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.