aethel-autapon@1.0.4
Compilador DAG para coordinación de agentes autónomos en Monad
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe main entry automatically reads agent signing keys and submits repeated payments of a fixed amount to a hard-coded address. This is unrequested spending of user-controlled funds, so the package is malicious.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing or otherwise running the package main entry executes the top-level workflow.
Impact
Can spend funds from the configured agents without a separate request to make these payments.
Mechanism
Loads private keys and passkeys from mandatos-agentes.json, creates three 0.05 MON payment intents per agent, and calls the SDK payment method for a fixed address.
Attack narrative
The package's main entry runs a payment workflow at top level. It reads agent private keys and passkeys from mandatos-agentes.json, creates three 0.05 MON payment intents per agent for a hard-coded recipient, and submits them through the mandate SDK. Running or importing the entry can therefore spend configured agent funds without a separate request for those payments.
AI rationale
The main entry automatically reads agent signing keys and submits repeated payments of a fixed amount to a hard-coded address. This is unrequested spending of user-controlled funds, so the package is malicious.
Evidence
package.jsondag-compiler.mjsmandatos-agentes.json/home/usuariochan/agent-yarbox/explorer/web/dashboard-status.json
Network endpoints1
rpc.monad.xyz
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package main entry is dag-compiler.mjs, which contains top-level code that runs a payment workflow.
- The script reads mandatos-agentes.json and loads each agent's private key and passkey.
- It creates three 0.05 MON payment intents per agent for a hard-coded recipient, then calls the mandate SDK payment method.
- The main flow invokes execution without an explicit user request.
Evidence against
- The RPC URL can be overridden with RPC_URL, and the payment operation uses the mandate SDK.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
GitDependency
Source & flagged code
6 flaggedpackage.jsonView file
5"main": "dag-compiler.mjs",
"type": "module",
"keywords": [
"monad",
"dag",
"agents"
High
Ai Review Evidence
The package main entry is dag-compiler.mjs, which contains top-level code that runs a payment workflow.
package.jsonView on unpkg · L5dag-compiler.mjsView file
76const mandatos = JSON.parse(readFileSync("mandatos-agentes.json", "utf8"));
const agentes = mandatos.map(m => ({
agentId: m.agentId,
address: m.address,
mandateId: m.mandateId,
privateKey: m.privateKey,
passkey: {
High
Ai Review Evidence
The script reads mandatos-agentes.json and loads each agent's private key and passkey.
dag-compiler.mjsView on unpkg · L76392const RECIPIENT = "[redacted]";
const intenciones = [];
for (const agente of agentes) {
for (let i = 0; i < PAGOS_POR_AGENTE; i++) {
intenciones.push({
agente,
amount: "0.
High
Findings
6 High3 Medium3 Low
HighAi Review Evidencepackage.json
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
HighAi Review Evidencedag-compiler.mjs
MediumNetwork
MediumEnvironment Vars
MediumGit Dependency
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to aethel-autapon@1.0.4.
See all versions of aethel-autapon for other recorded verdicts.
- Avoid installing aethel-autapon@1.0.4. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.