langgenius/dify
1
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-07-22 04:25:29 -04:00
Code Issues 775 Packages Projects Releases 10 Wiki Activity

AI web raise CPU 400% judge to CoinMiner #21131

New Issue
Closed
opened 2026-02-21 20:11:03 -05:00 by yindo · 1 comment
yindo commented 2026-02-21 20:11:03 -05:00
Owner
Copy Link
Copy Source

Originally created by @shuangqingqiang on GitHub (Dec 17, 2025).

Self Checks

  • I have read the Contributing Guide and Language Policy.
  • This is only for bug report, if you would like to ask a question, please head to Discussions.
  • I have searched for existing issues search for existing issues, including closed ones.
  • I confirm that I am using English to submit this report, otherwise it will be closed.
  • 【中文用户 & Non English User】请使用英语提交，否则会被关闭 ：）
  • Please do not modify this template :) and fill in all the required fields.

Dify version

1.9.2

Cloud or Self Hosted

Self Hosted (Docker)

Steps to reproduce

dify deploy

✔️ Expected Behavior

文件路径
/proc/30994/root/tmp/.XIX-unix/javat
恶意文件MD5
72a37a2fa588e013eafd695b8b5b0e61
恶意文件SHA256
0c748b9e8bc6b5b4fe989df67655f3301d28ef81617b9cbe8e0f6a19d4f9b657
扫描来源方式
进程启动扫描
检测方式
云查杀
进程ID
1800
进程命令行
/tmp/.XIX-unix/javat
文件创建用户
N/A
文件修改时间
2025-12-18 07:51:50
样本家族与特征
Miner:Linux/CoinMiner
源文件下载
下载
容器名
dify-web-1
容器ID
c7588d0eb0c5e780c9e5180d81ae1f32e4721b9da7b7f4fd50eb1852cf9b0591
镜像ID
langgenius/dify-web@sha256:f09fba9988fdaf623f9dc2902190120886da321c52a1d42ad8d9dfba811c6222
镜像名
langgenius/dify-web:1.9.2
容器视角文件路径
/tmp/.XIX-unix/javat

❌ Actual Behavior

No response

Originally created by @shuangqingqiang on GitHub (Dec 17, 2025). ### Self Checks - [x] I have read the [Contributing Guide](https://github.com/langgenius/dify/blob/main/CONTRIBUTING.md) and [Language Policy](https://github.com/langgenius/dify/issues/1542). - [x] This is only for bug report, if you would like to ask a question, please head to [Discussions](https://github.com/langgenius/dify/discussions/categories/general). - [x] I have searched for existing issues [search for existing issues](https://github.com/langgenius/dify/issues), including closed ones. - [x] I confirm that I am using English to submit this report, otherwise it will be closed. - [x] 【中文用户 & Non English User】请使用英语提交，否则会被关闭 ：） - [x] Please do not modify this template :) and fill in all the required fields. ### Dify version 1.9.2 ### Cloud or Self Hosted Self Hosted (Docker) ### Steps to reproduce dify deploy ### ✔️ Expected Behavior 文件路径 /proc/30994/root/tmp/.XIX-unix/javat 恶意文件MD5 72a37a2fa588e013eafd695b8b5b0e61 恶意文件SHA256 0c748b9e8bc6b5b4fe989df67655f3301d28ef81617b9cbe8e0f6a19d4f9b657 扫描来源方式 进程启动扫描 检测方式 云查杀 进程ID 1800 进程命令行 /tmp/.XIX-unix/javat 文件创建用户 N/A 文件修改时间 2025-12-18 07:51:50 样本家族与特征 Miner:Linux/CoinMiner 源文件[下载](https://sas-file-general-55.oss-cn-shanghai.aliyuncs.com/72a3/7a2f/a588/e013/eafd/695b/8b5b/0e61/72a37a2fa588e013eafd695b8b5b0e61?Expires=1768617648&OSSAccessKeyId=LTAI5tRpsF1P6pXqTBeM2X6w&Signature=KUUnrl5AGGX%2BJbgcDCfLEDEW3nE%3D) 下载 容器名 dify-web-1 容器ID c7588d0eb0c5e780c9e5180d81ae1f32e4721b9da7b7f4fd50eb1852cf9b0591 镜像ID langgenius/dify-web@sha256:f09fba9988fdaf623f9dc2902190120886da321c52a1d42ad8d9dfba811c6222 镜像名 langgenius/dify-web:1.9.2 容器视角文件路径 /tmp/.XIX-unix/javat ### ❌ Actual Behavior _No response_
yindo added the 🐞 bug label 2026-02-21 20:11:03 -05:00
yindo closed this issue 2026-02-21 20:11:03 -05:00
yindo commented 2026-02-21 20:11:04 -05:00
Author
Owner
Copy Link
Copy Source

@shuangqingqiang commented on GitHub (Dec 17, 2025):

Image
@shuangqingqiang commented on GitHub (Dec 17, 2025): <img width="1356" height="553" alt="Image" src="https://github.com/user-attachments/assets/3f6725ab-dac4-48c0-9d0f-ab3e17d7b294" />
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Knowledge Pipeline
Proposal
WIP
cloud
dependencies
feat:webapp
good first issue
outdated
performance
pull-request
Mirrored from GitHub Pull Request
 python:uv
refactor
size:L
stale
status: accepting prs
status: blocked
status: in discussion
stt & tts
vulnerablity
web
wont-fix
🌊 feat:workflow
🌚 invalid
🐞 bug
👻 feat:rag
💪 enhancement
📚 documentation
🔨 feat:tools
🙋‍♂️ question
🙏 help wanted
🤔 cant-reproduce
🤖 feat:agent
No Label 🐞 bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify#21131
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?