Aifa AI Agent
AIFA Network — open research on decentralized infrastructure for autonomous AI agents: Google A2A interoperability, Kademlia DHT discovery, NAT relays, end-to-end encryption, on-chain escrow and the $AIFA utility token. Specification stage.
Aifa is an open-source ai agent by aifa-agi, written mainly in TypeScript, with 62 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 10, 2026.
Scan summary: scanned Nov 5, 2026 at commit e4d0ea7. Seen able to run dynamic code, connect to the internet. Scan policy
e4d0ea7 · Nov 5, 2026Findings (89)
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.27.1: 2 known vulnerabilitiesGHSA-fv7c-fp4j-7gwp, GHSA-fv7c-fp4j-7gwp
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@fastify/busboy@2.1.1: 4 known vulnerabilitiesGHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.26.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.deepmerge-ts@7.1.5: 1 known vulnerabilityGHSA-ggr8-5vv4-36mx
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.defu@6.1.4: 1 known vulnerabilityGHSA-737v-mqg7-c878
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.effect@3.16.12: 1 known vulnerabilityGHSA-38f7-945m-qr2g
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 4 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.4: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 4 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-cookie@3.0.5: 2 known vulnerabilitiesGHSA-qjx8-664m-686j, GHSA-qjx8-664m-686j
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jsondiffpatch@0.6.0: 4 known vulnerabilitiesGHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485, GHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jws@3.2.2: 2 known vulnerabilitiesGHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.linkify-it@5.0.0: 4 known vulnerabilitiesGHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm, GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 4 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.1.0: 12 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-38c4-r59v-3vqw, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7 +7 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@5.1.6: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 6 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@5.1.5: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 4 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.playwright@1.55.0: 1 known vulnerabilityGHSA-7mvr-c777-76hp
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 8 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.prosemirror-view@1.41.0: 2 known vulnerabilitiesGHSA-c8x8-7fp4-3x9w, GHSA-c8x8-7fp4-3x9w
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@2.79.2: 2 known vulnerabilitiesGHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@4.0.0: 4 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@6.0.2: 6 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v +1 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.3: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 2 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.29.0: 16 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +11 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.25.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.6: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.9: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@5.1.3: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.2: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.playwright@1.51.0: 1 known vulnerabilityGHSA-7mvr-c777-76hp
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.3: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.prosemirror-view@1.38.1: 1 known vulnerabilityGHSA-c8x8-7fp4-3x9w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.2: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.28.5: 17 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +12 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.1: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.24.2: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmentor code: P1012 error: Environment variable not found: DATABASE_URL. --> prisma/schema.prisma:9 | 8 | provider = "postgresql" 9 | url = env("DATABASE_URL") | Validation Error Count: 1 [Context: getConfig] Prisma CLI Version : 6.7.0 ELIFECYCLE Command failed with exit code 1.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesbinaries.prisma.sh, checkpoint.prisma.io
- lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@2.2.8: 2 known vulnerabilitiesGHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.4: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@1.30.1: 2 known vulnerabilitiesGHSA-8988-4f7v-96qf, GHSA-8988-4f7v-96qf
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.0.1: 2 known vulnerabilitiesGHSA-8988-4f7v-96qf, GHSA-8988-4f7v-96qf
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ai@4.3.19: 1 known vulnerabilityGHSA-rwvc-j5jr-mgvh
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 2 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 2 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.8.4: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 2 known vulnerabilitiesGHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mdast-util-to-hast@13.2.0: 2 known vulnerabilitiesGHSA-4fh9-h7wg-q85m, GHSA-4fh9-h7wg-q85m
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.0.10: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-rj75-hqrm-r3gf
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 4 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.webpack@5.101.3: 2 known vulnerabilitiesGHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.1: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@2.2.7: 1 known vulnerabilityGHSA-866g-f22w-33x8
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.27.4: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@tiptap/core@3.4.3: 1 known vulnerabilityGHSA-cp6q-959q-f8rh
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ai@4.3.16: 1 known vulnerabilityGHSA-rwvc-j5jr-mgvh
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.webpack@5.99.9: 2 known vulnerabilitiesGHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.7.0: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.package.json has a postinstall scriptprisma generate
package.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Aifa alternatives
View more →Similar ai agents in Crypto & Web3, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Aifa (this page) aifa-agi | 62 | AGPL-3.0 | Oct 10, 2026 | Scanned, no flagged issues |
| Hummingbot hummingbot | 21k | Apache-2.0 | Oct 20, 2026 | Scanned, no flagged issues |
| Sphere unicity-sphere | 9.6k | None found | Oct 29, 2026 | Not scanned yet |
| ClawRouter BlockRunAI | 6.6k | MIT | Oct 28, 2026 | Scanned, no flagged issues |
| Swapper Toolkit swapperfinance | 853 | MIT | Apr 7, 2026 | Scanned, no flagged issues |
| Moonbags fciaf420 | 41 | None found | Jul 12, 2026 | Not scanned yet |