See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| opentelemetry-collector<0.140.0-r1 | chainguard:latest | 29 Nov 2025 |
| open-webui<0.6.40-r0 | chainguard:latest | 29 Nov 2025 |
| opentelemetry-collector<0.140.0-r1 | chainguard:latest | 29 Nov 2025 |
| opentelemetry-collector<0.140.0-r1 | chainguard:latest | 29 Nov 2025 |
| kdeconnect<25.04.0-1 | debian:14 | 29 Nov 2025 |
| kdeconnect<25.04.0-1 | debian:unstable | 29 Nov 2025 |
| kdeconnect<25.04.0-1 | debian:13 | 29 Nov 2025 |
| kdeconnect* | debian:11 | 29 Nov 2025 |
| kdeconnect* | debian:12 | 29 Nov 2025 |
| keras* | debian:11 | 29 Nov 2025 |
| k3d<5.8.3-r19 | chainguard:latest | 29 Nov 2025 |
| k9s<0.50.16-r4 | chainguard:latest | 29 Nov 2025 |
| k9s<0.50.16-r4 | chainguard:latest | 29 Nov 2025 |
| k3d<5.8.3-r19 | chainguard:latest | 29 Nov 2025 |
| k3d<5.8.3-r19 | chainguard:latest | 29 Nov 2025 |
| k3d<5.8.3-r19 | chainguard:latest | 29 Nov 2025 |
| gnome-shell-extension-gsconnect<71-1 | debian:14 | 29 Nov 2025 |
| gnome-shell-extension-gsconnect<62-1 | debian:13 | 29 Nov 2025 |
| gnome-shell-extension-gsconnect<71-1 | debian:unstable | 29 Nov 2025 |
| gnome-shell-extension-gsconnect<62-1+deb13u1 | debian:13 | 29 Nov 2025 |
| gnome-shell-extension-gsconnect<62-1 | debian:unstable | 29 Nov 2025 |
| gnome-shell-extension-gsconnect* | debian:12 | 29 Nov 2025 |
| gnome-shell-extension-gsconnect<62-1 | debian:14 | 29 Nov 2025 |
| code-server<4.106.2-r1 | chainguard:latest | 29 Nov 2025 |
| code-server<4.106.2-r1 | chainguard:latest | 29 Nov 2025 |
| victoriametrics-operator-fips<0.65.0-r2 | chainguard:latest | 29 Nov 2025 |
| victoriametrics-operator-fips<0.65.0-r2 | chainguard:latest | 29 Nov 2025 |
| tileserver-gl-fips<5.4.0-r5 | chainguard:latest | 29 Nov 2025 |
| tileserver-gl-fips<5.4.0-r5 | chainguard:latest | 29 Nov 2025 |
| expat* | debian:unstable | 29 Nov 2025 |