
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@sleep2agi/agent-network
Advanced tools
AI Agent Network CLI — Local-first multi-agent orchestration across 6 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Codex app-server / Grok Build ACP / OpenCode CLI) and 8+ LLM providers. Apache 2.0.
anet)anet connects local AI agents through one self-hosted Hub. It starts CommHub and the Dashboard, creates node identities, and manages node lifecycle, networks, tokens, tasks, and channels.
Requires Node.js ≥ 22.13 and Bun ≥ 1.2.
npm install -g bun @sleep2agi/agent-network @sleep2agi/agent-node
Stable releases use npm's latest tag. Features that are still being validated use preview:
anet upgrade --channel preview
Do not copy fixed package or preview numbers from old issues. Check the versioning guide and npm dist-tags for the current release.
Open three terminals:
# Terminal 1 — Hub
anet hub start
# Terminal 2 — Dashboard
anet hub dashboard
# Terminal 3 — login, create, start
anet login --hub http://127.0.0.1:9200 --username admin
anet node create my-bot
anet node start my-bot
The node is ready after its log reports SSE connected. Open http://localhost:3000 and send it a task from Dashboard.
anet node create shows only runtimes available in the installed release channel. Installation, authentication, permissions, and current availability are maintained in the runtime guide.
--copresence; see the co-presence guide.npx fallback is intentionally disabled, so install the documented CLI explicitly.latest nor preview includes a shared Grok TUI. Use grok-build-acp for published Grok nodes and follow the Grok TUI status page.Development branches may contain source-only runtime experiments. They are not supported installation paths until they appear in an npm dist-tag and the runtime guide.
Runtimes with CommHub tool integration can discover peers and delegate work with tools such as get_all_status, send_task, and get_task. Replies and ordinary messages do not recursively invoke another model; see the task lifecycle.
The default Hub is local-only. Before exposing it beyond localhost, change the initial password and follow the production deployment guide. Do not copy .anet node configs between machines: they contain network-bound identity and token material.
Apache-2.0.
FAQs
AI Agent Network CLI — Local-first multi-agent orchestration across 4 runtimes (Claude Code CLI / Claude Agent SDK / Codex SDK / Grok Build ACP) and 8+ LLM providers (Anthropic / OpenAI / xAI Grok / MiniMax / DeepSeek / GLM / Kimi / InternLM / Xiaomi MiMo
The npm package @sleep2agi/agent-network receives a total of 2,978 weekly downloads. As such, @sleep2agi/agent-network popularity was classified as popular.
We found that @sleep2agi/agent-network demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.