registry / @decentnetwork/lan / 0.1.314
@decentnetwork/lan@0.1.314
Private virtual LAN for self-hosted services and AI agents, built on Elastos Carrier. NAT-traversal, name service, ACL, all over a peer-to-peer mesh — no public IP required.
AI Security Review
scanned 15h ago · by lpm-firewall-aiThe source matches the package’s stated virtual LAN purpose: it configures network interfaces, routes and daemon services through CLI commands, while the manifest has no install hook. Service installation also applies scoped SSH hardening, and initialization may contact configured default doras; neither behavior establishes an attack in this context.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
CLI commands such as `init`, `service install`, `up` or `bootstrap update`; no install hook was identified.
Impact
These operations support the package’s networking purpose. The reviewed source did not show automatic collection or transmission of unrelated host data or credentials.
Mechanism
The CLI configures the TUN interface and routes, can persist and start its daemon on request, and can fetch bootstrap configuration from its configured HTTPS feed. Service installation also applies SSH hardening scoped to the AgentNet subnet.
AI rationale
The source matches the package’s stated virtual LAN purpose: it configures network interfaces, routes and daemon services through CLI commands, while the manifest has no install hook. Service installation also applies scoped SSH hardening, and initialization may contact configured default doras; neither behavior establishes an attack in this context.
Evidence
/etc/systemd/system/agentnet.service/Library/LaunchDaemons/com.decentlan.agentnet.plist/etc/ssh/sshd_config
Network endpoints2
beagle.chatens-gateway.beaglechat.workers.dev
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and has no install, preinstall or postinstall hook; prepublishOnly is a build workflow.
- Service persistence is registered under the explicit `service install` command, which is described as writing and starting the daemon service.
- Initialization creates the AgentNet configuration and supporting files when the user runs `init`.
- Shell commands in the route manager configure the package’s virtual network interface and routes.
- The bootstrap update command fetches remote configuration over HTTPS and rejects non-HTTPS URLs.
Evidence against
- On Linux and macOS, `service install` also invokes SSH hardening for the AgentNet subnet.
- `init` may send friend requests to the configured default doras as part of setting up the virtual network.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
11 flaggeddist/ui/server.jsView file
55async function revealInFileManager(filePath) {
L56: const { spawn } = await import("node:child_process");
L57: const run = (cmd, args) => new Promise((resolve) => {
High
dist/tun/route-manager.jsView file
3* Linux uses `ip` (iproute2), macOS uses `ifconfig` + `route`, and
L4: * Windows uses the built-in NetTCPIP PowerShell cmdlets.
L5: */
High
dist/ui/desktop/vendor/react-dom.production.min.jsView file
Findings
8 High6 Medium6 Low
HighChild Processdist/ui/server.js
HighShelldist/tun/route-manager.js
HighCross File Remote Execution Contextdist/cli/commands.js
HighTrigger Reachable Persistencedist/cli/commands.js
HighSemantic Analysis Limiteddist/console/console.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/cli/commands.js
HighKnown Malware Source Similaritydist/console/console.js
HighKnown Malware Source Similaritydist/ui/desktop/vendor/peer-webrtc.js
MediumDynamic Requiredist/ui/desktop/vendor/react-dom.production.min.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli/commands.js
Affected versions and remediation
This report applies to @decentnetwork/lan@0.1.314.
See all versions of @decentnetwork/lan for other recorded verdicts.
- Review the evidence and your use of @decentnetwork/lan@0.1.314 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.