Aifa AI Agent

by aifa-agi• 62•• Scanned•Claim this listing•Request removal
Crypto & Web3a2aaccount abstractionagent to agentai agentsautonomous agents

AIFA Network — open research on decentralized infrastructure for autonomous AI agents: Google A2A interoperability, Kademlia DHT discovery, NAT relays, end-to-end encryption, on-chain escrow and the $AIFA utility token. Specification stage.

Aifa is an open-source ai agent by aifa-agi, written mainly in TypeScript, with 62 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 10, 2026.

Scan summary: scanned Nov 5, 2026 at commit e4d0ea7. Seen able to run dynamic code, connect to the internet. Scan policy

Scanned
Full scan at e4d0ea7 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit371 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (89)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @babel/plugin-transform-modules-systemjs@7.27.1: 2 known vulnerabilities
    GHSA-fv7c-fp4j-7gwp, GHSA-fv7c-fp4j-7gwp
    package-lock.json
  • medium
    @fastify/busboy@2.1.1: 4 known vulnerabilities
    GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
    package-lock.json
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    package-lock.json
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    package-lock.json
  • medium
    browserslist@4.26.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    package-lock.json
  • medium
    deepmerge-ts@7.1.5: 1 known vulnerability
    GHSA-ggr8-5vv4-36mx
    package-lock.json
  • medium
    defu@6.1.4: 1 known vulnerability
    GHSA-737v-mqg7-c878
    package-lock.json
  • medium
    effect@3.16.12: 1 known vulnerability
    GHSA-38f7-945m-qr2g
    package-lock.json
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    package-lock.json
  • medium
    flatted@3.3.3: 4 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    package-lock.json
  • medium
    form-data@4.0.4: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    package-lock.json
  • medium
    glob@10.4.5: 4 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    package-lock.json
  • medium
    js-cookie@3.0.5: 2 known vulnerabilities
    GHSA-qjx8-664m-686j, GHSA-qjx8-664m-686j
    package-lock.json
  • medium
    js-yaml@4.1.0: 10 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
    package-lock.json
  • medium
    jsondiffpatch@0.6.0: 4 known vulnerabilities
    GHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485, GHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485
    package-lock.json
  • medium
    jws@3.2.2: 2 known vulnerabilities
    GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x
    package-lock.json
  • medium
    linkify-it@5.0.0: 4 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm, GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    package-lock.json
  • medium
    lodash@4.17.21: 4 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    package-lock.json
  • medium
    markdown-it@14.1.0: 12 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-38c4-r59v-3vqw, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7 +7 more
    package-lock.json
  • medium
    minimatch@3.1.2: 6 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
    package-lock.json
  • medium
    minimatch@5.1.6: 6 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
    package-lock.json
  • medium
    minimatch@9.0.5: 8 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
    package-lock.json
  • medium
    nanoid@3.3.11: 6 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
    package-lock.json
  • medium
    nanoid@5.1.5: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    package-lock.json
  • medium
    picomatch@2.3.1: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    package-lock.json
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    package-lock.json
  • medium
    playwright@1.55.0: 1 known vulnerability
    GHSA-7mvr-c777-76hp
    package-lock.json
  • medium
    postcss@8.4.31: 8 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
    package-lock.json
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    package-lock.json
  • medium
    prosemirror-view@1.41.0: 2 known vulnerabilities
    GHSA-c8x8-7fp4-3x9w, GHSA-c8x8-7fp4-3x9w
    package-lock.json
  • medium
    rollup@2.79.2: 2 known vulnerabilities
    GHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc
    package-lock.json
  • medium
    serialize-javascript@4.0.0: 4 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v
    package-lock.json
  • medium
    serialize-javascript@6.0.2: 6 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v +1 more
    package-lock.json
  • medium
    sharp@0.34.3: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    package-lock.json
  • medium
    source-map-js@1.2.1: 2 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    package-lock.json
  • medium
    undici@5.29.0: 16 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +11 more
    package-lock.json
  • medium
    ws@8.18.3: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    package-lock.json
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    brace-expansion@1.1.11: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    pnpm-lock.yaml
  • medium
    brace-expansion@2.0.1: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    pnpm-lock.yaml
  • medium
    browserslist@4.25.0: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    pnpm-lock.yaml
  • medium
    fast-uri@3.0.6: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    nanoid@3.3.9: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    nanoid@5.1.3: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    picomatch@4.0.2: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    playwright@1.51.0: 1 known vulnerability
    GHSA-7mvr-c777-76hp
    pnpm-lock.yaml
  • medium
    postcss@8.5.3: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    prosemirror-view@1.38.1: 1 known vulnerability
    GHSA-c8x8-7fp4-3x9w
    pnpm-lock.yaml
  • medium
    sharp@0.34.2: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    undici@5.28.5: 17 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +12 more
    pnpm-lock.yaml
  • medium
    ws@8.18.1: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    pnpm-lock.yaml
  • medium
    zod@3.24.2: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    Install or build failed in a clean environment
    or code: P1012 error: Environment variable not found: DATABASE_URL. --> prisma/schema.prisma:9 | 8 | provider = "postgresql" 9 | url = env("DATABASE_URL") | Validation Error Count: 1 [Context: getConfig] Prisma CLI Version : 6.7.0  ELIFECYCLE  Command failed with exit code 1.
  • medium
    Install contacted hosts other than package registries
    binaries.prisma.sh, checkpoint.prisma.io
  • low
    @ai-sdk/provider-utils@2.2.8: 2 known vulnerabilities
    GHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
    package-lock.json
  • low
    @babel/core@7.28.4: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    package-lock.json
  • low
    @opentelemetry/core@1.30.1: 2 known vulnerabilities
    GHSA-8988-4f7v-96qf, GHSA-8988-4f7v-96qf
    package-lock.json
  • low
    @opentelemetry/core@2.0.1: 2 known vulnerabilities
    GHSA-8988-4f7v-96qf, GHSA-8988-4f7v-96qf
    package-lock.json
  • low
    ai@4.3.19: 1 known vulnerability
    GHSA-rwvc-j5jr-mgvh
    package-lock.json
  • low
    ajv@6.12.6: 2 known vulnerabilities
    GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
    package-lock.json
  • low
    ajv@8.17.1: 2 known vulnerabilities
    GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
    package-lock.json
  • low
    baseline-browser-mapping@2.8.4: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    package-lock.json
  • low
    deepmerge@4.3.1: 2 known vulnerabilities
    GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
    package-lock.json
  • low
    mdast-util-to-hast@13.2.0: 2 known vulnerabilities
    GHSA-4fh9-h7wg-q85m, GHSA-4fh9-h7wg-q85m
    package-lock.json
  • low
    postcss-selector-parser@6.0.10: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-rj75-hqrm-r3gf
    package-lock.json
  • low
    postcss-selector-parser@6.1.2: 4 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    package-lock.json
  • low
    webpack@5.101.3: 2 known vulnerabilities
    GHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
    package-lock.json
  • low
    yaml@2.8.1: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    package-lock.json
  • low
    @ai-sdk/provider-utils@2.2.7: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @babel/core@7.27.4: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    pnpm-lock.yaml
  • low
    @tiptap/core@3.4.3: 1 known vulnerability
    GHSA-cp6q-959q-f8rh
    pnpm-lock.yaml
  • low
    ai@4.3.16: 1 known vulnerability
    GHSA-rwvc-j5jr-mgvh
    pnpm-lock.yaml
  • low
    webpack@5.99.9: 2 known vulnerabilities
    GHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
    pnpm-lock.yaml
  • low
    yaml@2.7.0: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    pnpm-lock.yaml
  • low
    package.json has a postinstall script
    prisma generate
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
binaries.prisma.shcheckpoint.prisma.ioregistry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Aifa alternatives

View more →

Similar ai agents in Crypto & Web3, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Aifa (this page)
aifa-agi
62AGPL-3.0Oct 10, 2026Scanned, no flagged issues
Hummingbot
hummingbot
21kApache-2.0Oct 20, 2026Scanned, no flagged issues
Sphere
unicity-sphere
9.6kNone foundOct 29, 2026Not scanned yet
ClawRouter
BlockRunAI
6.6kMITOct 28, 2026Scanned, no flagged issues
Swapper Toolkit
swapperfinance
853MITApr 7, 2026Scanned, no flagged issues
Moonbags
fciaf420
41None foundJul 12, 2026Not scanned yet