aethel-autapon@1.0.1
Compilador DAG para coordinación de agentes autónomos en Monad
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package main entrypoint makes repeated payments to a fixed address using locally loaded mandate credentials, without a per-payment runtime request. This is concrete unauthorized account activity and supports blocking publication.
Static reason
One or more suspicious static signals were detected.
Trigger
Loading or running the package main entrypoint.
Impact
Funds authorized by the local mandates may be transferred to the fixed recipient without a per-payment runtime request.
Mechanism
It reads mandate data, generates three 0.05 payments per agent to a hard-coded recipient, and calls the mandate SDK with each agent's passkey.
Attack narrative
The selected main module reads local mandate credentials and immediately builds payment intents for a fixed recipient. It validates those intents and executes payments through the mandate SDK without requiring a runtime request for the transfers.
AI rationale
The package main entrypoint makes repeated payments to a fixed address using locally loaded mandate credentials, without a per-payment runtime request. This is concrete unauthorized account activity and supports blocking publication.
Evidence
package.jsondag-compiler.mjsmandatos-agentes.json
Network endpoints1
rpc.monad.xyz
Decision evidence
public snapshotAI called this Malicious at 99.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package manifest selects dag-compiler.mjs as its main entrypoint.
- The entrypoint reads mandatos-agentes.json and initializes the SDK with each mandate's private key.
- At top level, it creates three 0.05 payments per agent to the fixed address 0x0000000000000000000000000000000000000001.
- The payment call passes the loaded passkey and generated amount and recipient to the SDK.
- The entrypoint proceeds from validation to payment execution without requiring a runtime request.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsUrlStrings
GitDependency
Source & flagged code
6 flaggedpackage.jsonView file
1{
"name": "aethel-autapon",
"version": "1.0.1",
"description": "Compilador DAG para coordinación de agentes autónomos en Monad",
"main": "dag-compiler.mjs",
"type": "mo
High
Ai Review Evidence
The package manifest selects dag-compiler.mjs as its main entrypoint.
package.jsonView on unpkg · L1dag-compiler.mjsView file
42const mandatos = JSON.parse(readFileSync("mandatos-agentes.json", "utf8"));
const agentes = mandatos.map(m => ({
agentId: m.agentId,
address: m.address,
mandateId: m.mandate
High
Ai Review Evidence
The entrypoint reads mandatos-agentes.json and initializes the SDK with each mandate's private key.
dag-compiler.mjsView on unpkg · L4250y(m.passkey.publicKey),
pubX: m.passkey.pubX,
pubY: m.passkey.pubY,
},
sdk: new MandateSDK({
privateKey: m.privateKey,
rpcUrl: RPC_URL,
chainId: CHAIN_ID,
}),
}));
// --- FASE 1: Validación pr
Findings
6 High2 Medium3 Low
HighAi Review Evidencepackage.json
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
MediumNetwork
MediumGit Dependency
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to aethel-autapon@1.0.1.
See all versions of aethel-autapon for other recorded verdicts.
- Avoid installing aethel-autapon@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.