MAL-2025-19710 Malicious code in epigenetics-procyon-pm2-magnetar (npm)

The package epigenetics-procyon-pm2-magnetar was found to contain malicious code...

Malicious code in celeste-pm2-deimos-toml (npm)

The package celeste-pm2-deimos-toml was found to contain malicious code...

MAL-2025-31929 Malicious code in redgiant-pm2-gridsome-fusion (npm)

The package redgiant-pm2-gridsome-fusion was found to contain malicious code...

Malicious code in exec-concurrently-run-script-pm2 (npm)

The package exec-concurrently-run-script-pm2 was found to contain malicious code...

Malicious code in pm2-harmony-client (npm)

The package pm2-harmony-client was found to contain malicious code...

Malicious code in cypress-pm2-wormhole-quark (npm)

The package cypress-pm2-wormhole-quark was found to contain malicious code...

Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code...

MAL-2025-20039 Malicious code in exec-concurrently-run-script-pm2 (npm)

The package exec-concurrently-run-script-pm2 was found to contain malicious code...

MAL-2025-25067 Malicious code in leda-middleware-pm2-impulse (npm)

The package leda-middleware-pm2-impulse was found to contain malicious code...

Malicious code in redgiant-pm2-gridsome-fusion (npm)

The package redgiant-pm2-gridsome-fusion was found to contain malicious code...

Malicious code in magellan-dysonswarm-pm2-saturnology (npm)

The package magellan-dysonswarm-pm2-saturnology was found to contain malicious code...

MAL-2025-24340 Malicious code in kastra-pm2-tardigrade-paleomagnetism (npm)

The package kastra-pm2-tardigrade-paleomagnetism was found to contain malicious code...

MAL-2025-17897 Malicious code in cypress-pm2-wormhole-quark (npm)

The package cypress-pm2-wormhole-quark was found to contain malicious code...

CVE-2025-5891

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to th...

pm2 Regular Expression Denial of Service vulnerability

A vulnerability classified as problematic was found in Unitech pm2 prior to 7.0.0. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-5891

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2025-5891 Unitech pm2 Config.js redos

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2025-5891

CVE-2025-5891 affects Unitech pm2 (versions up to 6.0.6; also noted in advisories for 6.0.8) due to incorrect handling in /lib/tools/Config.js that enables an inefficient regular expression pattern, resulting in a Regular Expression Denial of Service (ReDoS). The vulnerability is remotely exploit...

CVE-2025-5891 Unitech pm2 Config.js redos

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2025-5891 Unitech pm2 Config.js redos

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to th...