9950 matches found
CVE-2025-12633 Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection
The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...
EUVD-2025-111531
Malicious code in luna-start-prettier-stylelint-rest npm...
EUVD-2025-123475
Malicious code in postgres-rest-fornax-enceladus npm...
EUVD-2025-116876
Malicious code in aether-build-rest-epimetheus npm...
EUVD-2025-124344
Malicious code in nodejs-relay-rest-deneb npm...
EUVD-2025-122084
Malicious code in semantic-release-update-kronos-rest npm...
EUVD-2025-122585
Malicious code in rest-adonis-framework-ganymede npm...
Malicious code in dagda-fusion-altair-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122572
Malicious code in rest-husky-aurora-chromedriver npm...
EUVD-2025-122565
Malicious code in rest-nebula-apollo-bootes npm...
Malicious code in rest-adonis-framework-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc97d6ec3057d62c70412d4694f39667435d58eb89479f96832d7ed4b1b46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116100
Malicious code in betelgeuse-rest-zenobia-chalk npm...
Malicious code in rest-andromeda-ora-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124495
Malicious code in nextjs-rest-elektra-neptune npm...
EUVD-2025-122564
Malicious code in rest-nextjs-pegasus-colors npm...
EUVD-2025-121950
Malicious code in sirius-rest-atlas-rate-limiter npm...
EUVD-2025-122551
Malicious code in rest-xml-oberon-eslint npm...
Malicious code in rest-wasat-standard-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...