See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| gimp[,3.0.6) | Unmanaged (C/C++) | 31 Oct 2025 |
| gegl[,0.4.64) | Unmanaged (C/C++) | 31 Oct 2025 |
| gimp[,3.0.6) | Unmanaged (C/C++) | 31 Oct 2025 |
| gimp[,3.0.6) | Unmanaged (C/C++) | 31 Oct 2025 |
| xorg/xwayland[,24.1.9) | Unmanaged (C/C++) | 31 Oct 2025 |
| xorg-server[1.15,21.1.19) | Unmanaged (C/C++) | 31 Oct 2025 |
| xorg/xwayland[,24.1.9) | Unmanaged (C/C++) | 31 Oct 2025 |
| xorg-server[,21.1.19) | Unmanaged (C/C++) | 31 Oct 2025 |
| xorg/xwayland[,24.1.9) | Unmanaged (C/C++) | 31 Oct 2025 |
| xorg-server[,21.1.19) | Unmanaged (C/C++) | 31 Oct 2025 |
| isc-projects/kea[3.0.1,3.0.2)[3.1.0,3.1.3) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.11.0) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.11.0) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.12.0) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.10.2) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.11.0) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.11.0) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.10.2) | Unmanaged (C/C++) | 31 Oct 2025 |
| wazuh/wazuh[,4.10.2) | Unmanaged (C/C++) | 31 Oct 2025 |
| chromium[0,] | Unmanaged (C/C++) | 30 Oct 2025 |
| bitcoin/bitcoin[,29.1rc2)[30.0rc1,30.0) | Unmanaged (C/C++) | 30 Oct 2025 |
| bitcoin/bitcoin[,29.1rc2)[30.0rc1,30.0) | Unmanaged (C/C++) | 30 Oct 2025 |
| frrouting/frr[0,] | Unmanaged (C/C++) | 30 Oct 2025 |
| frrouting/frr[0,] | Unmanaged (C/C++) | 30 Oct 2025 |
| frrouting/frr[0,] | Unmanaged (C/C++) | 30 Oct 2025 |
| frrouting/frr[0,] | Unmanaged (C/C++) | 30 Oct 2025 |
| mysql[8.0.0, 8.0.44)[8.4.0, 8.4.7)[9.0.0, 9.4.1) | Unmanaged (C/C++) | 30 Oct 2025 |
| mysql[8.0.0, 8.0.44)[8.4.0, 8.4.7)[9.0.0, 9.4.1) | Unmanaged (C/C++) | 30 Oct 2025 |
| mysql[8.0.0, 8.0.44)[8.4.0, 8.4.7)[9.0.0, 9.4.1) | Unmanaged (C/C++) | 30 Oct 2025 |
| mysql[8.0.0, 8.0.44)[8.4.0, 8.4.7)[9.0.0, 9.4.1) | Unmanaged (C/C++) | 30 Oct 2025 |