See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
servant vulnerabilities
Static file server with fast live reloading, jade compiling, less compiling, directory listing. Command line application or basic boilerplate express.js app.