CVE-2026-6066

The CVE-2026-6066 entry concerns ConnectWise Automate, specifically the Solution Center component. The vulnerability is described as client-to-server communications potentially occurring without transport-layer encryption, enabling network-based interception of Solution Center traffic in Automate...

PT-2026-33785

ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-server communications could occur without transport-layer encryption. This could allow network‑based interception of Solution Center...

ConnectWise Automate 安全漏洞

ConnectWise Automate is a cloud-based local IT automation solution provided by the American company ConnectWise. This product supports functions such as content management, file sharing, and IT asset tracking and management. There is a security vulnerability in ConnectWise Automate, which stems...

[Webinar] The Smarter SOC Blueprint: Learn What to Build, Buy, and Automate

Most security teams today are buried under tools. Too many dashboards. Too much noise. Not enough real progress. Every vendor promises “complete coverage” or “AI-powered automation,” but inside most SOCs, teams are still overwhelmed, stretched thin, and unsure which tools are truly pulling their...

MAL-2025-176339 Malicious code in nokire-kushina19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7a09c80ddf619931d94a086524adf7f2e13fa53bb158aaf41ee09400f967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd0ba5aee3f8171f7c5b9ae0c1402ac2ac642d864252e071696daa05dab5675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-izar-meteor-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bbaa8857adffc1887054498110d02d4405e7640cce3cc16b238ec53cc5f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137003 Malicious code in siska-lontong100-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168cf9b39f606ade53fff6709d43740db398e471d033b0932eaded0c9b66e85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133133 Malicious code in erick-kue51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f1244a755e9e476928f7ebb020c4dbbdd89fdf03d8c329595a14996c66c7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kembang44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0d51a4e6a8f08a41ab515889f0b76298554a44dbbe5774912f185f330ad85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112431 Malicious code in unnecessary_tarantula_amber-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e89c67cb1ded747a7fca5760192c7069a55c68dbb3ef5ee469273e0cae064b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70627 Malicious code in similar-amaranth-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6319be03b372d20e6f624df0a8049bc2e1455a1e742f5e621985787d042c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63130 Malicious code in gilang-semur25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3184226273d1e68768c4ceab2eda883baf1f13ecd91a9bae2939b2469c1f2313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57670 Malicious code in mulyono-kue32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0ceb5816374371aca3769bb406d9b2afed1b8361c353e46c47121061c594bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-keripik86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cbe663adaedbb51fb61bfc4d84ce95eb78e428f02a38d115febf04196dfedd The package bella-keripik86-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in candra-kepok1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254de0e8b92a4dfc22e19df8ccbb1b215b2e1d8d639a901d21ef16fbe94aae04 The package candra-kepok1-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

CVE-2025-11492

In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some...

CVE-2025-11493

The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by...

EUVD-2025-34827

In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some...

EUVD-2025-34826

The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by...