See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| vim/vim[,9.1.1947) | Unmanaged (C/C++) | 3 Dec 2025 |
| hfiref0x/LightFTP[0,] | Unmanaged (C/C++) | 2 Dec 2025 |
| mborgerding/kissfft[0,] | Unmanaged (C/C++) | 2 Dec 2025 |
| apache/brpc[,1.15.0) | Unmanaged (C/C++) | 1 Dec 2025 |
| OpenPrinting/cups[,2.4.15) | Unmanaged (C/C++) | 30 Nov 2025 |
| OpenPrinting/cups[,2.4.15) | Unmanaged (C/C++) | 30 Nov 2025 |
| htcondor/htcondor[24.7.3,24.12.14)[25.0.0,25.0.3)[25.3.0,25.3.1) | Unmanaged (C/C++) | 30 Nov 2025 |
| apache/kvrocks[2.9.0,2.14.0-rc1) | Unmanaged (C/C++) | 30 Nov 2025 |
| jvde-github/AIS-catcher[,0.64) | Unmanaged (C/C++) | 30 Nov 2025 |
| apache/kvrocks[,2.14.0-rc1) | Unmanaged (C/C++) | 30 Nov 2025 |
| jvde-github/AIS-catcher[,0.64) | Unmanaged (C/C++) | 30 Nov 2025 |
| simple_directmedia_layer[0,] | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.80.0-beta1) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.40.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.40.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[1.48.0-beta1,1.56.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| libexpat[0,] | Unmanaged (C/C++) | 28 Nov 2025 |
| tianocore/edk2[edk2-stable202211,edk2-stable202502) | Unmanaged (C/C++) | 27 Nov 2025 |
| distrotech/cups-filters[,2.0.1) | Unmanaged (C/C++) | 27 Nov 2025 |
| wireshark[4.6.0,4.6.1) | Unmanaged (C/C++) | 27 Nov 2025 |
| suricata[,7.0.13)[8.0.0,8.0.2) | Unmanaged (C/C++) | 27 Nov 2025 |
| suricata[,7.0.13)[8.0.0,8.0.2) | Unmanaged (C/C++) | 27 Nov 2025 |
| suricata[,7.0.13)[8.0.0,8.0.2) | Unmanaged (C/C++) | 27 Nov 2025 |
| suricata[,8.0.2) | Unmanaged (C/C++) | 27 Nov 2025 |
| suricata[8.0.0,8.0.2) | Unmanaged (C/C++) | 27 Nov 2025 |
| suricata[,7.0.13)[8.0.0,8.0.2) | Unmanaged (C/C++) | 27 Nov 2025 |
| nanomq/NanoNNG[,0.24.3) | Unmanaged (C/C++) | 27 Nov 2025 |
| tinyproxy/tinyproxy[0,] | Unmanaged (C/C++) | 27 Nov 2025 |
| zephyrproject-rtos/zephyr[,4.3.0-rc1) | Unmanaged (C/C++) | 27 Nov 2025 |
| zephyrproject-rtos/zephyr[,4.3.0-rc1) | Unmanaged (C/C++) | 27 Nov 2025 |