CVE-2025-12633 Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

EUVD-2025-122573

Malicious code in rest-grunt-gatsby-impulse npm...

EUVD-2025-122567

Malicious code in rest-meteor-avior-webdriver-manager npm...

EUVD-2025-124687

Malicious code in mutation-rest-mongoose-castor npm...

EUVD-2025-122084

Malicious code in semantic-release-update-kronos-rest npm...

EUVD-2025-116762

Malicious code in alphard-rest-slides-markdownlint npm...

EUVD-2025-121950

Malicious code in sirius-rest-atlas-rate-limiter npm...

EUVD-2025-122558

Malicious code in rest-rimraf-auth0-comet npm...

EUVD-2025-116886

Malicious code in adonis-rest-stream-non-blocking npm...

EUVD-2025-122560

Malicious code in rest-quito-betelgeuse-corvus npm...

Malicious code in ganymede-rest-phenomic-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed7963fe55bbca47672ca7abce137c3ae49e070fccf341b8686bf940e6b9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-sirius-janus-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8551f142ce2cdd90b79d237c0616d99e1767b3b5b2376a82ea5dd9334bd47dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116477

Malicious code in async-halley-adonis-rest npm...

EUVD-2025-124025

Malicious code in ora-rest-markdown-sedna npm...

EUVD-2025-112380

Malicious code in iota-nestjs-firebase-rest npm...

EUVD-2025-122551

Malicious code in rest-xml-oberon-eslint npm...

Malicious code in lacerta-rest-mocha-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd2cea9b29f12c8809dbad7c7cc15741dc113c1461e85f0325ef348e76f7845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123475

Malicious code in postgres-rest-fornax-enceladus npm...

EUVD-2025-113794

Malicious code in event-mensa-rest-husky npm...

EUVD-2025-113035

Malicious code in grunt-stream-rest-browserify npm...