AgentArmorHQ
Sign in

Check before you install

Thinking of installing an AI tool? Paste its name or link. We'll tell you if it has been reported as malware or looks risky. Free, no sign-up.

Looks like a package.

package flowise

No known issues

The latest version, 3.1.4, is not affected. Versions >=0 <=3.0.5, >=0 <=3.0.12 were hijacked and reported; never install those. Pin 3.1.4 exactly.

Latest version
3.1.4
First published
3 years ago
Maintainers
10
Catalog grade
Not in the AI-tool catalog

Threat reports

  • CompromisedFlowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
  • CompromisedFlowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Install it pinned and without install scripts:

npm install --ignore-scripts --save-exact "flowise@3.1.4"

Threat reports checked Oct 30, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.

Was this check for flowise helpful?
Free first look / $19 full report

Go deeper

The answer above comes from threat reports and registry facts. A free first look also analyzes this version’s published files and shows the grade and how many serious issues we found. The full report adds the evidence, what it can access and what it does at install: $19 once, or 3 a month on Pro.

See a sample full report

Want to look around first? Browse the MCP & Skills directory or read the guides.