See the full list of npm packages compromised in the "Shai-Hulud supply chain attack – Sep 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsVULNERABILITY | AFFECTS | TYPE | PUBLISHED |
---|---|---|---|
| emqx/nanomq[,0.22.6) | Unmanaged (C/C++) | 29 Jul 2025 |
| emqx/nanomq[,0.22.2) | Unmanaged (C/C++) | 29 Jul 2025 |
| emqx/nanomq[,0.22.2) | Unmanaged (C/C++) | 29 Jul 2025 |
| d3tn/ud3tn[,0.14.3) | Unmanaged (C/C++) | 28 Jul 2025 |
| apache/httpd[2.4.64,2.4.65-rc2-candidate) | Unmanaged (C/C++) | 28 Jul 2025 |
| openjdk[,8.0.462)[9.0.0,11.0.28)[12.0.0,17.0.16)[18.0.0,21.0.8)[22.0.0,24.0.2) | Unmanaged (C/C++) | 28 Jul 2025 |
| openjdk[,8.0.462)[9.0.0,11.0.28) | Unmanaged (C/C++) | 28 Jul 2025 |
| ArtifexSoftware/ghostpdl[0,10.06.0-rc1) | Unmanaged (C/C++) | 27 Jul 2025 |
| qbittorrent/qbittorrent[,5.1.2) | Unmanaged (C/C++) | 27 Jul 2025 |
| v8/v8[,13.8.258.29) | Unmanaged (C/C++) | 27 Jul 2025 |
| chromium[,138.0.7204.168) | Unmanaged (C/C++) | 27 Jul 2025 |
| v8/v8[,13.8.258.29) | Unmanaged (C/C++) | 27 Jul 2025 |
| chromium[,138.0.7204.168) | Unmanaged (C/C++) | 27 Jul 2025 |
| binutils[,2.44) | Unmanaged (C/C++) | 27 Jul 2025 |
| chromium[,138.0.7204.157) | Unmanaged (C/C++) | 27 Jul 2025 |
| v8/v8[,14.0.5) | Unmanaged (C/C++) | 27 Jul 2025 |
| chromium[,138.0.7204.157) | Unmanaged (C/C++) | 27 Jul 2025 |
| LizardByte/Sunshine[,2025.628.4510) | Unmanaged (C/C++) | 27 Jul 2025 |
| LizardByte/Sunshine[,2025.628.4510) | Unmanaged (C/C++) | 27 Jul 2025 |
| zephyrproject-rtos/zephyr[,4.2.0-rc1) | Unmanaged (C/C++) | 25 Jul 2025 |
| oisf/libhtp[,0.5.51) | Unmanaged (C/C++) | 25 Jul 2025 |
| glibc[2.4,2.42) | Unmanaged (C/C++) | 24 Jul 2025 |
| thunderbird[,128.13)[140.0-b1,140.1)[141.0-b1,141.0) | Unmanaged (C/C++) | 24 Jul 2025 |
| Firefox-ESR[,115.26)[128.0,128.13)[140.1-b1,140.1) | Unmanaged (C/C++) | 24 Jul 2025 |
| Firefox[,141.0) | Unmanaged (C/C++) | 24 Jul 2025 |
| thunderbird[,128.13)[140.0-b1,140.1)[141.0-b1,141.0) | Unmanaged (C/C++) | 24 Jul 2025 |
| Firefox-ESR[,128.13)[140.0-b1,140.1) | Unmanaged (C/C++) | 24 Jul 2025 |
| Firefox[,141.0) | Unmanaged (C/C++) | 24 Jul 2025 |
| thunderbird[,128.13)[140.0-b1,140.1)[141.0-b1,141.0) | Unmanaged (C/C++) | 24 Jul 2025 |
| Firefox-ESR[,128.13)[140.0-b1,140.1) | Unmanaged (C/C++) | 24 Jul 2025 |