{"id":"infernetprotocol.com/infernet","name":"infernet","commands":["infernet"],"examples":[{"run":"infernet setup","does":"Install Ollama, pull a model, open the firewall and save config"},{"run":"infernet chat \"<prompt>\"","does":"Run local inference, no control plane needed"},{"run":"infernet model list","does":"See which models are pulled"},{"run":"infernet tui","does":"Open the live node dashboard (q to quit)"}],"description":"GPU node CLI and daemon that registers a GPU server with the Infernet Protocol and serves inference jobs.","homepage":"https://infernetprotocol.com","repository":"https://github.com/InfernetProtocol/infernet-protocol","license":"MIT","agentic":false,"latest_version":"0.1.71","vendor":"Profullstack","install":"curl -fsSL https://c0mpute.com/plugins/infernet/install.sh | sh","publisher":"profullstack","w3bs":"w3bs install infernetprotocol.com/infernet","scan":{"status":"flagged","scanner":"threatcrush 0.13.30","filesScanned":850,"summary":{"critical":0,"high":6,"medium":14,"low":20,"info":0},"malware":3,"truncated":false,"version":"0.1.71","sources":{"installer":"https://c0mpute.com/plugins/infernet/install.sh","installerSha256":"8f4add954703d8029231fbe498ba1ece57df69a5234b363e18e0db6b0de7cfb9","repository":"github.com/InfernetProtocol/infernet-protocol","commit":"12e47e2b1fd99e30785927bd685211028f415964"},"notes":[],"scannedAt":"2026-11-02T22:59:11.460Z","findings":[{"ruleId":"js-indirect-code-sink","title":"code sink reached indirectly","severity":"medium","category":"code","cwe":"CWE-506","file":"source/apps/web/lib/operator-vault.js","line":33,"malware":true},{"ruleId":"js-indirect-code-sink","title":"code sink reached indirectly","severity":"medium","category":"code","cwe":"CWE-506","file":"source/apps/web/lib/operator-vault.js","line":34,"malware":true},{"ruleId":"js-indirect-code-sink","title":"code sink reached indirectly","severity":"medium","category":"code","cwe":"CWE-506","file":"source/apps/web/lib/operator-vault.js","line":38,"malware":true},{"ruleId":"js-electron-node-integration","title":"Electron renderer given Node access","severity":"high","category":"code","cwe":"CWE-1188","file":"source/apps/desktop/electron/main.js","line":27,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"high","category":"secret","cwe":"CWE-798","file":"source/apps/web/app/getting-started/page.js","line":136,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"high","category":"secret","cwe":"CWE-798","file":"source/docs/book/01-introduction/getting-started.md","line":40,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"high","category":"secret","cwe":"CWE-798","file":"source/docs/MIGRATIONS.md","line":56,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"high","category":"secret","cwe":"CWE-798","file":"source/ipips/ipip-0013.md","line":187,"malware":false},{"ruleId":"sensitive-file-committed","title":"Sensitive file","severity":"high","category":"file","cwe":"CWE-538","file":"source/sample.env","line":1,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"medium","category":"secret","cwe":"CWE-798","file":"source/apps/mobile/src/context/AuthContext.js","line":170,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"medium","category":"secret","cwe":"CWE-798","file":"source/apps/mobile/src/context/AuthContext.js","line":239,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"medium","category":"secret","cwe":"CWE-798","file":"source/apps/web/app/docs/page.js","line":293,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/layout.js","line":148,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/apps/web/app/order/order-view.js","line":43,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/components/pit-footer.js","line":30,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"medium","category":"code","cwe":"CWE-494","file":"source/install.sh","line":583,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"medium","category":"code","cwe":"CWE-494","file":"source/install.sh","line":721,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"medium","category":"code","cwe":"CWE-494","file":"source/install.sh","line":971,"malware":false},{"ruleId":"sh-predictable-temp-path","title":"predictable temporary file","severity":"medium","category":"code","cwe":"CWE-377","file":"source/install.sh","line":1306,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/gpu/src/interconnect.js","line":177,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/docs/book/04-building-apps/index.md","line":33,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth-parse-body.test.js","line":43,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth-parse-body.test.js","line":46,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth-parse-body.test.js","line":64,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth-parse-body.test.js","line":70,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth-parse-body.test.js","line":73,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/cli-peers.test.js","line":51,"malware":false},{"ruleId":"secret-jwt","title":"JSON Web Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/cpr-canary.test.js","line":26,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/cpr-receipts.test.js","line":179,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/cpr-receipts.test.js","line":182,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/deploy-providers-foundation.test.js","line":220,"malware":false},{"ruleId":"secret-private-key","title":"Private Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/liquid-agent.test.js","line":88,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/node-commands-auth.test.js","line":68,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/node-commands-auth.test.js","line":69,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/operator-vault.test.js","line":62,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/profile-signup.test.js","line":53,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/profile-signup.test.js","line":65,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/profile-signup.test.js","line":90,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/reservation-orders.test.js","line":152,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/reservations.test.js","line":263,"malware":false}]}}