See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| podofo[0.10.0,] | Unmanaged (C/C++) | 8 Oct 2025 |
| ffmpeg[,5.1.7)[6.0,6.1.3)[7.0.1,7.1.2) | Unmanaged (C/C++) | 7 Oct 2025 |
| ffmpeg[,8.0) | Unmanaged (C/C++) | 7 Oct 2025 |
| ffmpeg[,8.0) | Unmanaged (C/C++) | 7 Oct 2025 |
| ffmpeg[,5.1.7)[6.0,6.1.3)[7.0.1,7.1.2) | Unmanaged (C/C++) | 7 Oct 2025 |
| ffmpeg[,5.1.7)[6.0,6.1.3)[7.0.1,7.1.2) | Unmanaged (C/C++) | 7 Oct 2025 |
| ffmpeg[,8.0) | Unmanaged (C/C++) | 7 Oct 2025 |
| assimp/assimp[0,] | Unmanaged (C/C++) | 7 Oct 2025 |
| assimp/assimp[0,] | Unmanaged (C/C++) | 7 Oct 2025 |
| assimp/assimp[0,] | Unmanaged (C/C++) | 7 Oct 2025 |
| ffmpeg[,8.0) | Unmanaged (C/C++) | 7 Oct 2025 |
| fetchmail/fetchmail[5.9.9,6.5.6)[7.0.0-alpha8,7.0.0-alpha11) | Unmanaged (C/C++) | 7 Oct 2025 |
| hdf5[0,] | Unmanaged (C/C++) | 7 Oct 2025 |
| hdf5[0,] | Unmanaged (C/C++) | 7 Oct 2025 |
| redis/redis[,8.2.2) | Unmanaged (C/C++) | 6 Oct 2025 |
| redis/redis[,8.2.2) | Unmanaged (C/C++) | 6 Oct 2025 |
| redis/redis[,8.2.2) | Unmanaged (C/C++) | 6 Oct 2025 |
| redis/redis[,8.2.2) | Unmanaged (C/C++) | 6 Oct 2025 |
| Nheko-Reborn/mtxclient[,0.10.1) | Unmanaged (C/C++) | 6 Oct 2025 |
| Nheko-Reborn/nheko[,0.12.1) | Unmanaged (C/C++) | 6 Oct 2025 |
| qemu-project/qemu[,10.2.0-rc1) | Unmanaged (C/C++) | 6 Oct 2025 |
| thiagoralves/OpenPLC_v3[0,] | Unmanaged (C/C++) | 6 Oct 2025 |
| thiagoralves/OpenPLC_v3[0,] | Unmanaged (C/C++) | 6 Oct 2025 |
| zabbix/zabbix[6.0.0,6.0.41)[7.0.0,7.0.18)[7.2.0,7.2.12)[7.4.0,7.4.2) | Unmanaged (C/C++) | 3 Oct 2025 |
| zabbix/zabbix[6.0.0,6.0.41)[7.0.0,7.0.18)[7.2.0,7.2.12)[7.4.0,7.4.2) | Unmanaged (C/C++) | 3 Oct 2025 |
| zabbix/zabbix[6.0.0,6.0.41)[7.0.0,7.0.18)[7.2.0,7.2.12)[7.4.0,7.4.2) | Unmanaged (C/C++) | 3 Oct 2025 |
| wazuh/wazuh[3.8.0,4.11.0) | Unmanaged (C/C++) | 3 Oct 2025 |
| vstakhov/libucl[0,] | Unmanaged (C/C++) | 3 Oct 2025 |
| poppler[24.06.1,25.04.0) | Unmanaged (C/C++) | 3 Oct 2025 |
| suricata[,7.0.12)[8.0.0,8.0.1) | Unmanaged (C/C++) | 2 Oct 2025 |