Malicious code in ira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30eee402ea7cd2dd1773bc26a1c2eec16aa5dc2731704986b6b0f8215ecc61a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141303

Malicious code in ira-29 npm...

EUVD-2025-141295

Malicious code in ira-36 npm...

MAL-2025-174987 Malicious code in ira-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4eeb13ff0f79d1fcbf4f7b8bf4c58355ef39586be95f134a15fea56c876650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d12c359842dfac1a3d4fca3922ab0315b09b0bb686123da3bd0debf5b4b5b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174950 Malicious code in ira-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f63ea25dfac1ea30fe5abc551f5b0675eb09ef0dffffe5e5c2f78966a1a38b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eab9e599ff44a1846fd23822b36f0065c6051dfa4d2ce1b213ef6d405507a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e372296038bc32c6802dbd65d52d5d2ecc7927e934d9f38bfc1e31c238ce6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c82cd57eb593f063a58d8aad219ec849d8ee9dea84ea11ac424d212cb59b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141297

Malicious code in ira-34 npm...

Malicious code in ira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fb25c9e79a081c630061039ebd3127969a224ba4df78c4994371d999e23077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0a7a5d754d21f35ad1b9f0fbac283d7f7240335d7a23f3f03d06f69b3da628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2024-12972 · Zte · Zte Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZTE ZXCLOUD iRAI affected versions not specified Description: The issue is related to a DLL hijacking vulnerability. An attacker could exploit this by placing a fake DLL file in a specific directory, allowing the execution of malicious code...

PT-2020-14920

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.21.12M and earlier, 4.22.x through 4.22.6M, 4.23.x through 4.23.4M, and 4.24.x through 4.24.1F Description The issue allows remote attackers to cause a denial of service by crafting a malformed DHCP packet, leading to an...

The Russian Disinfo Operation You Never Heard About

The campaign known as Secondary Infektion appears to be a distinct effort from the meddling of the IRA and GRU—and it went undetected for years...

How Instagram Became the Russian IRA's Go-To Social Network

A Senate report finds that Russia's Internet Research Agency was far more active, and more successful, on Instagram in 2017 than on Facebook or Twitter...

Information operations on Twitter: new data released on election tampering

Back in April, we talked about the wealth of options available to Russian hackers and others launching social engineering campaigns, whether on social networks or through clever attacks launched via Advanced Persistent Threats. Some of that was information published by Twitter at the time in...

ira-builder.com XSS vulnerability

Open Bug Bounty ID: OBB-63286 Description| Value ---|--- Affected Website:| ira-builder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-6912

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...