MAL-2025-35020 Malicious code in test-mlw2-bykes-overt (npm)

The package test-mlw2-bykes-overt was found to contain malicious code...

MAL-2025-9039 Malicious code in @malware-test-unrid-stint-biccy-roils/test-mlw3-unrid-stint-biccy-roils (npm)

The package @malware-test-unrid-stint-biccy-roils/test-mlw3-unrid-stint-biccy-roils was found to contain malicious code...

MAL-2025-37762 Malicious code in unicorn-vkmpt-b5mk4-frost-project (npm)

The package unicorn-vkmpt-b5mk4-frost-project was found to contain malicious code...

MAL-2025-9998 Malicious code in @zalastax/nolb-_extraw (npm)

The package @zalastax/nolb-extraw was found to contain malicious code...

MAL-2025-8952 Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm)

The package @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy was found to contain malicious code...

MAL-2025-35108 Malicious code in test-mlw2-colly-mooed (npm)

The package test-mlw2-colly-mooed was found to contain malicious code...

MAL-2025-36054 Malicious code in test-mlw2-pumps-palla (npm)

The package test-mlw2-pumps-palla was found to contain malicious code...

MAL-2025-34943 Malicious code in test-mlw2-beaux-luffa (npm)

The package test-mlw2-beaux-luffa was found to contain malicious code...

MAL-2025-40748 Malicious code in zany-drift-qov382-project (npm)

The package zany-drift-qov382-project was found to contain malicious code...

MAL-2025-9631 Malicious code in @waitfortea2024/illo-commodi-et (npm)

The package @waitfortea2024/illo-commodi-et was found to contain malicious code...

MAL-2025-8700 Malicious code in @malware-test-haith-dunts-urger-emend/test-mlw3-haith-dunts-urger-emend (npm)

The package @malware-test-haith-dunts-urger-emend/test-mlw3-haith-dunts-urger-emend was found to contain malicious code...

MAL-2025-34865 Malicious code in test-mlw2-aloft-spend (npm)

The package test-mlw2-aloft-spend was found to contain malicious code...

MAL-2025-40582 Malicious code in yonder-emerald-qck740-project (npm)

The package yonder-emerald-qck740-project was found to contain malicious code...

MAL-2025-7046 Malicious code in @adzu/jshost-events (npm)

The package @adzu/jshost-events was found to contain malicious code...

MAL-2025-7693 Malicious code in @crabas0npm2/perspiciatis-temporibus-labore (npm)

The package @crabas0npm2/perspiciatis-temporibus-labore was found to contain malicious code...

MAL-2025-40684 Malicious code in yyb-pangu (npm)

The package yyb-pangu was found to contain malicious code...

MAL-2025-8939 Malicious code in @malware-test-sored-novel-afear-neves/test-mlw3-sored-novel-afear-neves (npm)

The package @malware-test-sored-novel-afear-neves/test-mlw3-sored-novel-afear-neves was found to contain malicious code...

MAL-2025-8473 Malicious code in @malware-test-aweel-jiffs-sowed-cyans/test-mlw3-aweel-jiffs-sowed-cyans (npm)

The package @malware-test-aweel-jiffs-sowed-cyans/test-mlw3-aweel-jiffs-sowed-cyans was found to contain malicious code...

CVE-2025-3466

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictio...

CVE-2025-3466: Insufficient Isolation of System-Dependent Functions

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictio...