See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| bytecodealliance/wasm-micro-runtime[,2.4.4) | Unmanaged (C/C++) | 26 Nov 2025 |
| fluent/fluent-bit[,4.1.1) | Unmanaged (C/C++) | 26 Nov 2025 |
| fluent/fluent-bit[,4.1.1) | Unmanaged (C/C++) | 26 Nov 2025 |
| fluent/fluent-bit[,4.1.1) | Unmanaged (C/C++) | 26 Nov 2025 |
| fluent/fluent-bit[,4.1.1) | Unmanaged (C/C++) | 26 Nov 2025 |
| fluent/fluent-bit[,4.1.1) | Unmanaged (C/C++) | 26 Nov 2025 |
| 7-zip[,25.00) | Unmanaged (C/C++) | 26 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| Xilinx/XRT[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| Xilinx/XRT[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| Xilinx/XRT[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| Xilinx/XRT[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| Xilinx/XRT[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| obgm/libcoap[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| webkit[0,] | Unmanaged (C/C++) | 25 Nov 2025 |
| cesanta/mongoose[,7.2) | Unmanaged (C/C++) | 25 Nov 2025 |
| redboltz/async_mqtt[0,10.2.6) | Unmanaged (C/C++) | 25 Nov 2025 |
| libpng[1.6.0,1.6.51) | Unmanaged (C/C++) | 24 Nov 2025 |
| libpng[1.6.0,1.6.51) | Unmanaged (C/C++) | 24 Nov 2025 |
| libpng[1.6.0,1.6.51) | Unmanaged (C/C++) | 24 Nov 2025 |
| libpng[,1.6.51) | Unmanaged (C/C++) | 24 Nov 2025 |
| jarun/nnn[0,] | Unmanaged (C/C++) | 24 Nov 2025 |
| wireshark[4.4.0,4.4.11)[4.5.0rc0,4.6.1) | Unmanaged (C/C++) | 24 Nov 2025 |