230 matches found
CVE-2025-55349
CVE-2025-55349 — pm2 Beliebige Codeausführung über postinstall Entdecker : Golden Ticket Labs Hersteller : Unitech pm2 Zuweisungsdatum : 20. August 2025 MITRE Beschreibung Eine Schwachstelle in der Komponente lib/API/Modules/NPM.js von Unitech PM2 v5.4.2 ermöglicht beliebige Codeausführung durch...
Malicious Package
Overview leda-hydra-pm2-indus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview cypress-pm2-wormhole-quark is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
MAL-2026-7012 Malicious code in express-mongo-limit (npm)
The npm package express-mongo-limit masquerades as an Express/MongoDB payload sanitization middleware likely typosquatting express-mongo-sanitize but is a credential stealer, remote-code-execution backdoor, crypto clipboard hijacker, and screenshot spyware. It declares a postinstall: node index.j...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
Malicious code in leda-pm2-lacerta-speleology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15f24a3383d0a2cf2d4910535b0e870d23aaadc1c90c54fe9c449020340802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zephyr-mongodb-wavefunction-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6455e842bfed2e45795b6fa4955bfa999151b2b9d2cf8678f31179f7a042f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176225
Malicious code in standard-saturnology-webpack-pm2 npm...
EUVD-2025-177119
Malicious code in pm2-development-postcss-callback npm...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...
EUVD-2025-179626
Malicious code in commitlint-resolvers-procyon-pm2 npm...
EUVD-2025-179560
Malicious code in corvus-biohacking-helmet-pm2 npm...
EUVD-2025-179522
Malicious code in cosmos-framework-gacrux-pm2 npm...
EUVD-2025-178841
Malicious code in foundation-rigel-pm2-foundation npm...
EUVD-2025-180227
Malicious code in auth-pm2-xo-google npm...