See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| firefox<145.0-1 | debian:unstable | 12 Nov 2025 |
| firefox<145.0-1 | debian:unstable | 12 Nov 2025 |
| firefox<145.0-1 | debian:unstable | 12 Nov 2025 |
| firefox<145.0-1 | debian:unstable | 12 Nov 2025 |
| firefox<145.0-1 | debian:unstable | 12 Nov 2025 |
| firefox<145.0-1 | debian:unstable | 12 Nov 2025 |
| busybox* | debian:13 | 12 Nov 2025 |
| busybox* | debian:unstable | 12 Nov 2025 |
| busybox* | debian:14 | 12 Nov 2025 |
| busybox* | debian:11 | 12 Nov 2025 |
| busybox* | debian:12 | 12 Nov 2025 |
| lxd<5.0.2-5+deb12u2 | debian:12 | 11 Nov 2025 |
| lxd* | debian:13 | 11 Nov 2025 |
| libmicrohttpd* | debian:unstable | 11 Nov 2025 |
| libmicrohttpd* | debian:14 | 11 Nov 2025 |
| libmicrohttpd* | debian:13 | 11 Nov 2025 |
| libmicrohttpd* | debian:11 | 11 Nov 2025 |
| libmicrohttpd* | debian:12 | 11 Nov 2025 |
| libmicrohttpd* | debian:14 | 11 Nov 2025 |
| libmicrohttpd* | debian:unstable | 11 Nov 2025 |
| libmicrohttpd* | debian:13 | 11 Nov 2025 |
| libmicrohttpd* | debian:11 | 11 Nov 2025 |
| libmicrohttpd* | debian:12 | 11 Nov 2025 |
| incus<6.0.5-4 | debian:14 | 11 Nov 2025 |
| incus<6.0.5-4 | debian:unstable | 11 Nov 2025 |
| incus<6.0.4-2+deb13u2 | debian:13 | 11 Nov 2025 |
| chromium* | debian:11 | 9 Nov 2025 |
| chromium<140.0.7339.80-1~deb12u1 | debian:12 | 9 Nov 2025 |
| chromium<140.0.7339.80-1~deb13u1 | debian:13 | 9 Nov 2025 |
| chromium<140.0.7339.80-1~deb13u1 | debian:13 | 9 Nov 2025 |