Malicious code in ira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f0de4a594431a449fe1e8c2ec5dbfda1b72ad791130a2f2f0c98c788340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141323

Malicious code in ira-11 npm...

Malicious code in ira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4e2dc723998f885fc6b543752c982334b21bb05497addc952f3fae19e6e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4fd4b9b1fb6eac49a4808c74ba9daece8be0478d080719370ad186c08e290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30eee402ea7cd2dd1773bc26a1c2eec16aa5dc2731704986b6b0f8215ecc61a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141310

Malicious code in ira-22 npm...

MAL-2025-174950 Malicious code in ira-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f63ea25dfac1ea30fe5abc551f5b0675eb09ef0dffffe5e5c2f78966a1a38b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174961 Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174986 Malicious code in ira-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e372296038bc32c6802dbd65d52d5d2ecc7927e934d9f38bfc1e31c238ce6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174967 Malicious code in ira-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1ad9fbeeeb5fe17484e58e6bf4b80cc7c32eb3d64d1fc9c9e99a9d5e934e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174987 Malicious code in ira-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4eeb13ff0f79d1fcbf4f7b8bf4c58355ef39586be95f134a15fea56c876650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0a7a5d754d21f35ad1b9f0fbac283d7f7240335d7a23f3f03d06f69b3da628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2024-12972 · Zte · Zte Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZTE ZXCLOUD iRAI affected versions not specified Description: The issue is related to a DLL hijacking vulnerability. An attacker could exploit this by placing a fake DLL file in a specific directory, allowing the execution of malicious code...

The Russian Disinfo Operation You Never Heard About

The campaign known as Secondary Infektion appears to be a distinct effort from the meddling of the IRA and GRU—and it went undetected for years...

How Instagram Became the Russian IRA's Go-To Social Network

A Senate report finds that Russia's Internet Research Agency was far more active, and more successful, on Instagram in 2017 than on Facebook or Twitter...

Information operations on Twitter: new data released on election tampering

Back in April, we talked about the wealth of options available to Russian hackers and others launching social engineering campaigns, whether on social networks or through clever attacks launched via Advanced Persistent Threats. Some of that was information published by Twitter at the time in...

ira-builder.com XSS vulnerability

Open Bug Bounty ID: OBB-63286 Description| Value ---|--- Affected Website:| ira-builder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-6912

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The IRA's 59th Annual Conference aka com.coreapps.android.followme.ira14 application 6.0.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6912

The CVE-2014-6912 entry relates to the Android app for The IRA’s 59th Annual Conference (package com.coreapps.android.followme.ira_14), version 6.0.7.6. The connected documents confirm a root cause: the app does not verify X.509 certificates from SSL servers. Impact stated in the sources is that ...