MAL-2025-40031 Malicious code in xylophone-bamboo-yua432-project (npm)

The package xylophone-bamboo-yua432-project was found to contain malicious code...

MAL-2025-35272 Malicious code in test-mlw2-emote-hazes (npm)

The package test-mlw2-emote-hazes was found to contain malicious code...

MAL-2025-35915 Malicious code in test-mlw2-omlah-hanap (npm)

The package test-mlw2-omlah-hanap was found to contain malicious code...

MAL-2025-9340 Malicious code in @sourceressj2001/expedita-iste-nisi (npm)

The package @sourceressj2001/expedita-iste-nisi was found to contain malicious code...

MAL-2025-34996 Malicious code in test-mlw2-bouks-jukes-start-least (npm)

The package test-mlw2-bouks-jukes-start-least was found to contain malicious code...

MAL-2025-9039 Malicious code in @malware-test-unrid-stint-biccy-roils/test-mlw3-unrid-stint-biccy-roils (npm)

The package @malware-test-unrid-stint-biccy-roils/test-mlw3-unrid-stint-biccy-roils was found to contain malicious code...

MAL-2025-39925 Malicious code in xray-5t8-project (npm)

The package xray-5t8-project was found to contain malicious code...

MAL-2025-8128 Malicious code in @kollorg/modi-fugit-accusantium (npm)

The package @kollorg/modi-fugit-accusantium was found to contain malicious code...

MAL-2025-37255 Malicious code in tsb-proteo-ui-basics (npm)

The package tsb-proteo-ui-basics was found to contain malicious code...

MAL-2025-35187 Malicious code in test-mlw2-decry-kuris (npm)

The package test-mlw2-decry-kuris was found to contain malicious code...

MAL-2025-35329 Malicious code in test-mlw2-feuds-toled (npm)

The package test-mlw2-feuds-toled was found to contain malicious code...

MAL-2025-8797 Malicious code in @malware-test-morns-bairn/test-mlw3-morns-bairn (npm)

The package @malware-test-morns-bairn/test-mlw3-morns-bairn was found to contain malicious code...

MAL-2025-40052 Malicious code in xylophone-myth-wbx282-project (npm)

The package xylophone-myth-wbx282-project was found to contain malicious code...

MAL-2025-39878 Malicious code in xml-query-minify-error-lambda (npm)

The package xml-query-minify-error-lambda was found to contain malicious code...

MAL-2025-8473 Malicious code in @malware-test-aweel-jiffs-sowed-cyans/test-mlw3-aweel-jiffs-sowed-cyans (npm)

The package @malware-test-aweel-jiffs-sowed-cyans/test-mlw3-aweel-jiffs-sowed-cyans was found to contain malicious code...

MAL-2025-36696 Malicious code in test-package-for-npm (npm)

The package test-package-for-npm was found to contain malicious code...

MAL-2025-38937 Malicious code in wawan-ruwet53-breki (npm)

The package wawan-ruwet53-breki was found to contain malicious code...

MAL-2025-35484 Malicious code in test-mlw2-hammy-coaly-kilns-coifs (npm)

The package test-mlw2-hammy-coaly-kilns-coifs was found to contain malicious code...

MAL-2025-40203 Malicious code in yaml-perseus-gridsome-style-loader (npm)

The package yaml-perseus-gridsome-style-loader was found to contain malicious code...

CVE-2025-3466

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictio...