MAL-2025-174986 Malicious code in ira-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e372296038bc32c6802dbd65d52d5d2ecc7927e934d9f38bfc1e31c238ce6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174961 Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141295

Malicious code in ira-36 npm...

Malicious code in ira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dc12e793251b7a359ecf60a628711581878bc0d492ed76819698b16b942610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141306

Malicious code in ira-26 npm...

Malicious code in ira-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c96cfb1f54d9fac8dd3e500f0561acf3fde384450fed86282c94a26514e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141281

Malicious code in ira-49 npm...

Malicious code in ira-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d274c8e67d49031e9a58fcccd6adb5ec3995e8e87a36a67fb9bd1e89d55958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174972 Malicious code in ira-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ac4bd5b0bca220adb6e2d0024877211cdaeb4e9c94fd2c74bf1c627f617d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141280

Malicious code in ira-5 npm...

Malicious code in irma-pisang4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0a7a5d754d21f35ad1b9f0fbac283d7f7240335d7a23f3f03d06f69b3da628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2024-12972 · Zte · Zte Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZTE ZXCLOUD iRAI affected versions not specified Description: The issue is related to a DLL hijacking vulnerability. An attacker could exploit this by placing a fake DLL file in a specific directory, allowing the execution of malicious code...

PT-2020-14920

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.21.12M and earlier, 4.22.x through 4.22.6M, 4.23.x through 4.23.4M, and 4.24.x through 4.24.1F Description The issue allows remote attackers to cause a denial of service by crafting a malformed DHCP packet, leading to an...

The Russian Disinfo Operation You Never Heard About

The campaign known as Secondary Infektion appears to be a distinct effort from the meddling of the IRA and GRU—and it went undetected for years...

How Instagram Became the Russian IRA's Go-To Social Network

A Senate report finds that Russia's Internet Research Agency was far more active, and more successful, on Instagram in 2017 than on Facebook or Twitter...

Information operations on Twitter: new data released on election tampering

Back in April, we talked about the wealth of options available to Russian hackers and others launching social engineering campaigns, whether on social networks or through clever attacks launched via Advanced Persistent Threats. Some of that was information published by Twitter at the time in...

ira-builder.com XSS vulnerability

Open Bug Bounty ID: OBB-63286 Description| Value ---|--- Affected Website:| ira-builder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-6912

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...