See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| kibana-9.1<9.1.8-r1 | chainguard:latest | 5 Dec 2025 |
| kibana-9.1<9.1.8-r1 | chainguard:latest | 5 Dec 2025 |
| tekton-chains<0.26.0-r2 | chainguard:latest | 5 Dec 2025 |
| tekton-chains<0.26.0-r2 | chainguard:latest | 5 Dec 2025 |
| spire-server<1.13.3-r2 | chainguard:latest | 5 Dec 2025 |
| smarter-device-manager<1.20.11-r22 | chainguard:latest | 5 Dec 2025 |
| spire-server<1.13.3-r2 | chainguard:latest | 5 Dec 2025 |
| smarter-device-manager<1.20.11-r22 | chainguard:latest | 5 Dec 2025 |
| rekor<1.4.3-r2 | chainguard:latest | 5 Dec 2025 |
| sftpgo<2.7.0-r2 | chainguard:latest | 5 Dec 2025 |
| secrets-store-csi-driver-provider-gcp<1.10.0-r0 | chainguard:latest | 5 Dec 2025 |
| sftpgo<2.7.0-r2 | chainguard:latest | 5 Dec 2025 |
| pvc-autoresizer<0.18.0-r2 | chainguard:latest | 5 Dec 2025 |
| redis-operator<0.22.2-r1 | chainguard:latest | 5 Dec 2025 |
| pvc-autoresizer<0.18.0-r2 | chainguard:latest | 5 Dec 2025 |
| redis-operator<0.22.2-r1 | chainguard:latest | 5 Dec 2025 |
| secrets-store-csi-driver-provider-gcp<1.10.0-r0 | chainguard:latest | 5 Dec 2025 |
| rekor<1.4.3-r2 | chainguard:latest | 5 Dec 2025 |
| pulumi-language-yaml<1.25.1-r1 | chainguard:latest | 5 Dec 2025 |
| rancher-machine<0.15.0.137-r2 | chainguard:latest | 5 Dec 2025 |
| rancher-machine<0.15.0.137-r2 | chainguard:latest | 5 Dec 2025 |
| podman<5.7.0-r2 | chainguard:latest | 5 Dec 2025 |
| pg_user<1.1.1-r3 | chainguard:latest | 5 Dec 2025 |
| pg_user<1.1.1-r3 | chainguard:latest | 5 Dec 2025 |
| podman<5.7.0-r2 | chainguard:latest | 5 Dec 2025 |
| otel-cli<0.4.5-r8 | chainguard:latest | 5 Dec 2025 |
| otel-cli<0.4.5-r8 | chainguard:latest | 5 Dec 2025 |
| opentelemetry-operator<0.140.0-r1 | chainguard:latest | 5 Dec 2025 |
| percona-server-mongodb-operator<1.21.1-r2 | chainguard:latest | 5 Dec 2025 |
| opentelemetry-operator<0.140.0-r1 | chainguard:latest | 5 Dec 2025 |