See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| netsurf-browser/netsurf[0,] | Unmanaged (C/C++) | 11 Nov 2025 |
| netsurf-browser/netsurf[0,] | Unmanaged (C/C++) | 11 Nov 2025 |
| netsurf-browser/netsurf[0,] | Unmanaged (C/C++) | 11 Nov 2025 |
| haproxy[0,] | Unmanaged (C/C++) | 10 Nov 2025 |
| libmicrohttpd[0,] | Unmanaged (C/C++) | 10 Nov 2025 |
| libmicrohttpd[0,] | Unmanaged (C/C++) | 10 Nov 2025 |
| mruby/mruby[0,] | Unmanaged (C/C++) | 10 Nov 2025 |
| zephyrproject-rtos/zephyr[,4.2.0-rc1) | Unmanaged (C/C++) | 10 Nov 2025 |
| amazon-ion/ion-c[,1.1.4) | Unmanaged (C/C++) | 10 Nov 2025 |
| curl[7.69.0,8.17.0) | Unmanaged (C/C++) | 9 Nov 2025 |
| antirez/redis[8.2.0,8.2.3) | Unmanaged (C/C++) | 7 Nov 2025 |
| python[,3.9.25)[3.10.0a1,] | Unmanaged (C/C++) | 7 Nov 2025 |
| quickjs-ng/quickjs[,0.11.0) | Unmanaged (C/C++) | 6 Nov 2025 |
| bellard/quickjs[0,] | Unmanaged (C/C++) | 6 Nov 2025 |
| libarchive[0,] | Unmanaged (C/C++) | 6 Nov 2025 |
| lasso[,2.9.0) | Unmanaged (C/C++) | 6 Nov 2025 |
| lasso[,2.9.0) | Unmanaged (C/C++) | 6 Nov 2025 |
| lasso[,2.9.0) | Unmanaged (C/C++) | 6 Nov 2025 |
| lasso[,2.9.0) | Unmanaged (C/C++) | 6 Nov 2025 |
| BrianPugh/tamp[,1.10.3) | Unmanaged (C/C++) | 5 Nov 2025 |
| elog_project[0,] | Unmanaged (C/C++) | 5 Nov 2025 |
| elog_project[0,] | Unmanaged (C/C++) | 5 Nov 2025 |
| elog_project[0,] | Unmanaged (C/C++) | 5 Nov 2025 |
| raspberrypi/rpi-imager[,2.0.0-rc3) | Unmanaged (C/C++) | 4 Nov 2025 |
| lighttpd[1.4.80, 1.4.81) | Unmanaged (C/C++) | 4 Nov 2025 |
| vtk/vtk[0,] | Unmanaged (C/C++) | 31 Oct 2025 |
| vtk/vtk[0,] | Unmanaged (C/C++) | 31 Oct 2025 |
| vtk/vtk[0,] | Unmanaged (C/C++) | 31 Oct 2025 |
| vtk/vtk[0,] | Unmanaged (C/C++) | 31 Oct 2025 |
| pdns-recursor[,4.9.9)[5.0.0, 5.0.9)[5.1.0, 5.1.2) | Unmanaged (C/C++) | 31 Oct 2025 |