CVE-2025-55349

CVE-2025-55349 — pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...

Malicious code in library-init-flare-pm2 (npm)

Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-cross-env-enif-pm2 (npm)

Source: amazon-inspector f51f4bd1b642b2fde0f784e6728bc41be9488dea6352aa752a2e1ccd2f2f7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-sequelize-pm2-sagitta (npm)

Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-pm2-lacerta-speleology (npm)

Source: amazon-inspector 5a15f24a3383d0a2cf2d4910535b0e870d23aaadc1c90c54fe9c449020340802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-middleware-pm2-impulse (npm)

The package leda-middleware-pm2-impulse was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in leda-hydra-pm2-indus (npm)

Source: amazon-inspector 7d56e20b55b72b350fc2e6d9234e19db1c5dd0f9a3428ab870886fa15a9efa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview leda-hydra-pm2-indus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in kinetic-module-apollo-pm2 (npm)

Source: amazon-inspector 4b5cb804d1f1fc283f2f095cb16ea1efc39e0c5c01069f6c181acce93aa56ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kastra-pm2-tardigrade-paleomagnetism (npm)

The package kastra-pm2-tardigrade-paleomagnetism was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in jwt-rest-jest-pm2 (npm)

Source: amazon-inspector 02d14fa447358c02a9d824fc3d31f4bf2eb4969999e71f2031f7f9dbacb0e360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jwt-pm2-sirius-dione (npm)

Source: amazon-inspector 6ecfb2565bc45db26c95bc5b56093e599e6063f6d689c623a3d25d40a4f29dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in install-config-hydra-pm2 (npm)

Source: amazon-inspector 276ed3297a64726866fd682b9a60e6b8eb9375954fce02ecb2c46cb27181a072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inquirer-pm2-graphql-miranda (npm)

Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in ignite-pm2-postcss-transform (npm)

Source: amazon-inspector 8095a9cb35cc211097688e59741a37304773dc1f5130ed8ae6a8a9f8eddfcb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hydra-sails-jekyll-pm2 (npm)

Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in husky-ganymede-pm2-react-bootstrap (npm)

Source: amazon-inspector a4ae165c50206a4c6c2d4bfbf0d57465a55bd17853661b93f751e03903ea096b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in higgs-ichnology-paleoceanography-pm2 (npm)

Source: amazon-inspector 448734a11e1e60f2e814de6f5a2cec7155b838543ad69631c37633d80f4e0f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hexo-apollo-janus-pm2 (npm)

Source: amazon-inspector c05007f5fa2858df75a8256dd3fad6c0555590c1cb53011e0ce7dacbc72478c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hermes-castor-pm2-celeste (npm)

Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...