See the full list of npm packages compromised in the "Shai-Hulud supply chain attack – Sep 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsVULNERABILITY | AFFECTS | TYPE | PUBLISHED |
---|---|---|---|
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,115.28)[116,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| LizardByte/Sunshine[,2025.628.4510) | Unmanaged (C/C++) | 17 Sept 2025 |
| open-web-analytics/open-web-analytics<1.8.1 | Composer | 17 Sept 2025 |
| lavitto/typo3-form-to-database<2.2.5>=3.0.0, <3.2.2>=4.0.0, <4.2.3>=5.0.0, <5.0.2 | Composer | 17 Sept 2025 |
| com.liferay.commerce:com.liferay.commerce.service[,11.0.168) | Maven | 17 Sept 2025 |
| com.liferay:com.liferay.comment.web[,6.1.4) | Maven | 17 Sept 2025 |