EUVD-2025-141283

Malicious code in ira-47 npm...

Malicious code in ira-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4811338c457fbf4d7be6b6406c0073e1de6788d4a404adf731c86cd27405c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141281

Malicious code in ira-49 npm...

EUVD-2025-141278

Malicious code in ira-6 npm...

Malicious code in ira-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c82cd57eb593f063a58d8aad219ec849d8ee9dea84ea11ac424d212cb59b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174961 Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174951 Malicious code in ira-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46fb25c9e79a081c630061039ebd3127969a224ba4df78c4994371d999e23077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174954 Malicious code in ira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30eee402ea7cd2dd1773bc26a1c2eec16aa5dc2731704986b6b0f8215ecc61a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174992 Malicious code in ira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f0de4a594431a449fe1e8c2ec5dbfda1b72ad791130a2f2f0c98c788340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174950 Malicious code in ira-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f63ea25dfac1ea30fe5abc551f5b0675eb09ef0dffffe5e5c2f78966a1a38b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174967 Malicious code in ira-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1ad9fbeeeb5fe17484e58e6bf4b80cc7c32eb3d64d1fc9c9e99a9d5e934e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0a7a5d754d21f35ad1b9f0fbac283d7f7240335d7a23f3f03d06f69b3da628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2024-12972 · Zte · Zte Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZTE ZXCLOUD iRAI affected versions not specified Description: The issue is related to a DLL hijacking vulnerability. An attacker could exploit this by placing a fake DLL file in a specific directory, allowing the execution of malicious code...

The Russian Disinfo Operation You Never Heard About

The campaign known as Secondary Infektion appears to be a distinct effort from the meddling of the IRA and GRU—and it went undetected for years...

How Instagram Became the Russian IRA's Go-To Social Network

A Senate report finds that Russia's Internet Research Agency was far more active, and more successful, on Instagram in 2017 than on Facebook or Twitter...

Information operations on Twitter: new data released on election tampering

Back in April, we talked about the wealth of options available to Russian hackers and others launching social engineering campaigns, whether on social networks or through clever attacks launched via Advanced Persistent Threats. Some of that was information published by Twitter at the time in...

ira-builder.com XSS vulnerability

Open Bug Bounty ID: OBB-63286 Description| Value ---|--- Affected Website:| ira-builder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-6912

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6912

The CVE-2014-6912 entry relates to the Android app for The IRA’s 59th Annual Conference (package com.coreapps.android.followme.ira_14), version 6.0.7.6. The connected documents confirm a root cause: the app does not verify X.509 certificates from SSL servers. Impact stated in the sources is that ...