MAL-2025-151228 Malicious code in abiba-aluai-aya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c2a3d39482f8e73ec751d51d24538272586188f779d348cec381c88221fab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146472

Malicious code in verify-aya-aul npm...

EUVD-2025-146486

Malicious code in verify-aya-amilsuai npm...

Malicious code in verify-aya-aul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b04a85e4e1d88d16f0cb54594b39854a0cc1780616e7d2ee8ffa37e99b25ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146474

Malicious code in verify-aya-auioanygial npm...

EUVD-2025-146473

Malicious code in verify-aya-auioanyugial npm...

EUVD-2025-146484

Malicious code in verify-aya-amilsukaxmai npm...

Malicious code in verify-aya-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe49e854047d1f9cc460fc59b51e74504c4704693d86d0cc424ac0abcc88f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-auioanyugial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71323533d9a83ab17b789dd3b243824c7d2d82a5dc092278a5dd0c7cca4a562b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-amilui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48aa539b790d2135fefceccedb4d4497fe998ac9494e35190a6dd65fc408f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170332 Malicious code in verify-aya-amilui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48aa539b790d2135fefceccedb4d4497fe998ac9494e35190a6dd65fc408f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170324 Malicious code in verify-aya-amil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4dd738127b97d6ba6d876359f7ba5439193f3db8b453eb2406abac5bc6d85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170330 Malicious code in verify-aya-amilsuxai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72155a4ade85fec726e5920d6aa6835c06757be11d558a9793bc557f541d3d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

CVE-2022-46101

AyaCMS v3.1.2 was found to have a code flaw in the ustsql.inc.php file, which allows attackers to cause command execution by inserting malicious code...

AyaCMS 代码注入漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS v3.1.2, which originated from a code flaw found in the ustsql.inc.php file, which can be exploited by an attacker to cause command execution by inserting malicious code...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

AyaCMS 跨站请求伪造漏洞

AyaCMS is an extremely simple and free open source Php builder. AyaCMS suffers from a cross-site request forgery vulnerability that stems from the software's lack of checking for cross-site request forgery during an administrator password change. An attacker can exploit this vulnerability to chan...