See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,115.28)[116,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| LizardByte/Sunshine[,2025.628.4510) | Unmanaged (C/C++) | 17 Sept 2025 |
| hmailserver/hmailserver[5.6.8,] | Unmanaged (C/C++) | 17 Sept 2025 |
| hmailserver/hmailserver[5.6.8,] | Unmanaged (C/C++) | 17 Sept 2025 |