@infernetprotocol/cli@0.1.53: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@infernetprotocol/cli@0.1.53: Suspicious npm security report | LPM Firewall

lib/firewall.jsView file

Lines 68-108javascript

68 break;

69 case 'firewalld':

70 lines.push('[firewalld]');

71 lines.push(` sudo firewall-cmd --permanent --add-port=${port}/tcp`);

72 lines.push(` sudo firewall-cmd --reload`);

73 break;

74 case 'nftables':

75 lines.push('[nftables]');

76 lines.push(` sudo nft add rule inet filter input tcp dport ${port} accept`);

77 break;

78 case 'iptables':

79 lines.push('[iptables]');

80 lines.push(` sudo iptables -I INPUT -p tcp --dport ${port} -j ACCEPT`);

81 lines.push(` # Persist across reboots with iptables-save or your distro's equivalent.`);

82 break;

83 case 'pf':

84 lines.push('[macOS pf — add to /etc/pf.conf and reload]');

85 lines.push(` pass in proto tcp from any to any port ${port}`);

86 lines.push(` sudo pfctl -f /etc/pf.conf`);

87 break;

88 case 'netsh':

89 lines.push('[Windows — elevated PowerShell or cmd]');

90 lines.push(` netsh advfirewall firewall add rule name="Infernet P2P ${port}" dir=in action=allow protocol=TCP localport=${port}`);

High

Shell

Package source references shell execution.

lib/firewall.jsView on unpkg · L88

91 break;

92 default:

93 lines.push(`(${tool}): manual configuration required`);

94 }

95 }

96 return { detected, lines };

97}

98

99/**

100 * Emit a firewall how-to block to stdout. `context` is a short label

101 * (e.g. "init") that gets included in the header for clarity.

102 */

103export function printFirewallHint(port, context = '') {

104 const { detected, lines } = describeFirewallHowTo(port);

105 const header = context

106 ? `-- firewall hint (${context}, port ${port}) --`

107 : `-- firewall hint (port ${port}) --`;

108 process.stdout.write(`${header}\n`);

commands/service.jsView file

Lines 6-46javascript

6 * daemon: auto-restart on crash, optional auto-start at boot, logs

7 * to journald. Runs as the unprivileged user — never touches /etc

8 * or anything system-wide. Service file lives under

9 * ~/.config/systemd/user/infernet.service.

10 *

11 * Linux-only (uses systemd --user). macOS / Windows users continue

12 * to run `infernet start` directly or wire their own supervisor.

13 *

14 * Usage:

15 * infernet service install write the unit file + daemon-reload

16 * infernet service uninstall stop / disable / delete the unit file

17 * infernet service enable systemctl --user enable --now infernet

18 * infernet service disable systemctl --user disable --now infernet

19 * infernet service status systemctl --user status infernet

20 * infernet service logs journalctl --user -u infernet -f

21 * infernet service unit print the unit file we'd write (no side effects)

22 */

23

24import fs from "node:fs/promises";

25import path from "node:path";

26import os from "node:os";

27import { spawn, spawnSync } from "node:child_process";

28import { fileURLToPath } from "node:url";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

commands/service.jsView on unpkg · L26

29import { question } from "../lib/prompt.js";

30

31export const SERVICE_NAME = "infernet";

32

33const HELP = `infernet service — manage the userland systemd unit

34

35Usage:

36 infernet service <subcommand> [flags]

37

38Subcommands:

39 install Write ~/.config/systemd/user/${SERVICE_NAME}.service and daemon-reload

40 uninstall Stop, disable, and remove the unit file

41 enable systemctl --user enable --now ${SERVICE_NAME}

42 disable systemctl --user disable --now ${SERVICE_NAME}

43 status systemctl --user status ${SERVICE_NAME}

44 logs journalctl --user -u ${SERVICE_NAME} -f

45 unit Print the unit file that would be written (no side effects)

46