See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| v8/v8[,14.3.112-pgo) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| chromium[,143.0.7499.40) | Unmanaged (C/C++) | 4 Dec 2025 |
| abrt/abrt[0,] | Unmanaged (C/C++) | 4 Dec 2025 |
| envoyproxy/envoy[1.8.0, 1.33.13)[1.34.0, 1.34.11)[1.35.0,] | Unmanaged (C/C++) | 4 Dec 2025 |
| envoyproxy/envoy[1.8.0, 1.33.13)[1.34.0, 1.34.11)[1.35.0,] | Unmanaged (C/C++) | 4 Dec 2025 |
| envoyproxy/envoy[1.8.0, 1.33.13)[1.34.0, 1.34.11)[1.35.0,] | Unmanaged (C/C++) | 4 Dec 2025 |
| smallbasic/SmallBASIC[0,] | Unmanaged (C/C++) | 4 Dec 2025 |
| python[,3.14.1) | Unmanaged (C/C++) | 3 Dec 2025 |
| facebook/proxygen[2025.08.25.00,2025.12.02.00) | Unmanaged (C/C++) | 3 Dec 2025 |
| vim/vim[,9.1.1947) | Unmanaged (C/C++) | 3 Dec 2025 |
| hfiref0x/LightFTP[0,] | Unmanaged (C/C++) | 2 Dec 2025 |
| mborgerding/kissfft[0,] | Unmanaged (C/C++) | 2 Dec 2025 |
| apache/brpc[,1.15.0) | Unmanaged (C/C++) | 1 Dec 2025 |
| OpenPrinting/cups[,2.4.15) | Unmanaged (C/C++) | 30 Nov 2025 |
| OpenPrinting/cups[,2.4.15) | Unmanaged (C/C++) | 30 Nov 2025 |
| htcondor/htcondor[24.7.3,24.12.14)[25.0.0,25.0.3)[25.3.0,25.3.1) | Unmanaged (C/C++) | 30 Nov 2025 |
| apache/kvrocks[2.9.0,2.14.0-rc1) | Unmanaged (C/C++) | 30 Nov 2025 |
| jvde-github/AIS-catcher[,0.64) | Unmanaged (C/C++) | 30 Nov 2025 |
| apache/kvrocks[,2.14.0-rc1) | Unmanaged (C/C++) | 30 Nov 2025 |
| jvde-github/AIS-catcher[,0.64) | Unmanaged (C/C++) | 30 Nov 2025 |
| simple_directmedia_layer[,2.0.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.80.0-beta1) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.40.0) | Unmanaged (C/C++) | 28 Nov 2025 |