MAL-2026-5327 Malicious code in @listings/energy-labels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41caac3ab1f9c35a72841357174aeeec16c142c08cc28030a875b2dba85f04ba The package declares "preinstall": "node index.js || true" in package.json, so on every npm install the script executes automatically and silently...

CVE-2026-11528

creationtimestamp| type| source ---|---|--- 2026-06-08 13:41:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116714772643192342...

CVE-2026-11507

creationtimestamp| type| source ---|---|--- 2026-06-08 13:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrs3vsfty2t...

CVE-2026-11557

creationtimestamp| type| source ---|---|--- 2026-06-08 13:28:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116714719508127342...

CVE-2026-11509

creationtimestamp| type| source ---|---|--- 2026-06-08 13:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrrjy7tdb2v...

CVE-2026-48041

creationtimestamp| type| source ---|---|--- 2026-06-08 13:20:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnrrjchxit2q...

CVE-2026-11504

creationtimestamp| type| source ---|---|--- 2026-06-08 13:15:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrrazq3l623 2026-06-09 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mnu4ekj7r42x...

CVE-2026-11510

creationtimestamp| type| source ---|---|--- 2026-06-08 13:07:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqsn5qkk26...

CVE-2026-11506

creationtimestamp| type| source ---|---|--- 2026-06-08 13:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqmnycdg2s...

CVE-2026-11505

creationtimestamp| type| source ---|---|--- 2026-06-08 13:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqhbsvgd2o...

CVE-2026-3011

creationtimestamp| type| source ---|---|--- 2026-06-08 12:58:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqcfccyu2q 2026-06-11 08:16:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyrwxwhl52o...

CVE-2026-11569

creationtimestamp| type| source ---|---|--- 2026-06-08 12:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrq5vv63p23...

CVE-2026-50752

creationtimestamp| type| source ---|---|--- 2026-06-08 12:29:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0179 2026-06-08 13:35:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrseujkif2s 2026-06-08 15:00:32+00:00| seen|...

CVE-2026-9506

creationtimestamp| type| source ---|---|--- 2026-06-08 11:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrlfqxm5c2t...

CVE-2026-11497

creationtimestamp| type| source ---|---|--- 2026-06-08 11:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrkaro5st2w...

CVE-2026-11501

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=savepatient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack...

CVE-2026-41724

creationtimestamp| type| source ---|---|--- 2026-06-08 10:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnrgg4qvqn25 2026-06-08 10:24:16+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-560 2026-06-08 10:50:45+00:00| seen|...

CVE-2025-67246

creationtimestamp| type| source ---|---|--- 2026-06-08 09:48:18+00:00| seen| https://gist.github.com/harvey7092/9fdcae180558f96fe75b1dbb492d9227...

CVE-2026-11485

creationtimestamp| type| source ---|---|--- 2026-06-08 07:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr6vtkaip2s...

CVE-2026-11488

creationtimestamp| type| source ---|---|--- 2026-06-08 07:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr6mv2u2z2j...