218 matches found
CVE-2025-55349
CVE-2025-55349 — pm2: esecuzione arbitraria di codice tramite postinstall Scopritore : Golden Ticket Labs Fornitore : Unitech pm2 Data di assegnazione : 20 agosto 2025 MITRE Descrizione Un problema nel componente lib/API/Modules/NPM.js di Unitech PM2 v5.4.2 consente l'esecuzione arbitraria di...
CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
MAL-2026-7012 Malicious code in express-mongo-limit (npm)
The npm package express-mongo-limit masquerades as an Express/MongoDB payload sanitization middleware likely typosquatting express-mongo-sanitize but is a credential stealer, remote-code-execution backdoor, crypto clipboard hijacker, and screenshot spyware. It declares a postinstall: node index.j...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
EUVD-2025-176076
Malicious code in tachyon-mesosphere-spinner-pm2 npm...
Malicious code in xo-helios-child-process-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6abf116ef5bd6a77aedf9bcc2b5428a4945e26fbf2e8c0d79a0fccebb457771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175471
Malicious code in xo-helios-child-process-pm2 npm...
EUVD-2025-179839
Malicious code in celeste-pm2-xerxes-kuiperbelt npm...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...
EUVD-2025-178143
Malicious code in leda-pm2-lacerta-speleology npm...
EUVD-2025-178841
Malicious code in foundation-rigel-pm2-foundation npm...
EUVD-2025-180227
Malicious code in auth-pm2-xo-google npm...
EUVD-2025-179626
Malicious code in commitlint-resolvers-procyon-pm2 npm...
EUVD-2025-179179
Malicious code in electron-pm2-toml-test npm...
EUVD-2025-179031
Malicious code in eslint-postcss-loader-pm2-cressida npm...
Malicious code in leda-pm2-lacerta-speleology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15f24a3383d0a2cf2d4910535b0e870d23aaadc1c90c54fe9c449020340802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186256 Malicious code in commitlint-resolvers-procyon-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a42a0bd7b27857197441ce982e9035d4e93ebf009d7bb23942627d9ce0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180184
Malicious code in await-pm2-quito-meteor npm...