Hostile 92% github Download

langflow-ai/langflow v1.12.0.dev29

Trojanized dependencies with exfiltration

“Langflow is a powerful tool for building and deploying AI-powered agents and workflows.”

NPM install hook exfiltrates filtered environment valuesPackage decoder uses fetch to send caller input to a raw-IP endpoint
SHA-256aaded3723dea15ed7c176e0f595fff5e92d37786e2d8e474977fe47efabc8470
URLhttps://github.com/langflow-ai/langflow/archive/refs/tags/v1.12.0.dev29.tar.gz
MaleculeK₃(Am₄Li₅Te₂)O₁₂(S₆C₇Ca₃Co₅Xe₄AsDy₃Er₂Eu₂ILa₂P₂)H₁₁(Cm₁₀₁Cr₁₀Db₅₂F₃₆HfMgOs₃₁Po₄₄Ti₃U₁₂)Md₇(BiBk₄In₂Li₂Pa₁₁)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.