# Impact of SHA1-Hulud: The Second Coming on the Mintlify CLI

DevFeed: [Impact of SHA1-Hulud: The Second Coming on the Mintlify CLI](<https://devfeed.tech/articles/impact-of-sha1-hulud-the-second-coming-on-the-mintlify-cli-31088.md>)

Original publisher: [Read original article](<https://www.mintlify.com/blog/sha1-hulud-the-second-coming>)

Author: Han Wang

Published: 2025-11-25T00:00:00Z

Content type: news

Language: en

Sources: [Mintlify Blog](<https://devfeed.tech/sources/mintlify-blog.md>)

Topics: [Command-line interface](<https://devfeed.tech/topics/cli.md>), [npm](<https://devfeed.tech/topics/npm.md>), [malicious packages](<https://devfeed.tech/topics/malicious-packages.md>), [Security](<https://devfeed.tech/topics/security.md>), [pnpm](<https://devfeed.tech/topics/pnpm.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [announcements](<https://devfeed.tech/tags/announcements.md>), [deprecated](<https://devfeed.tech/tags/deprecated.md>), [malicious-packages](<https://devfeed.tech/tags/malicious-packages.md>), [npm](<https://devfeed.tech/tags/npm.md>), [pnpm](<https://devfeed.tech/tags/pnpm.md>), [resolved](<https://devfeed.tech/tags/resolved.md>), [security](<https://devfeed.tech/tags/security.md>), [sha1-hulud](<https://devfeed.tech/tags/sha1-hulud.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>)

## AI overview

Mintlify reports that its CLI was briefly exposed to the SHA1-Hulud supply chain attack through compromised npm dependencies on November 24, 2025. The company says it resolved the issue within six hours, released CLI version 4.2.210, deprecated potentially affected versions, and provided remediation steps for users who installed or updated during the vulnerable window.

## Source excerpt

The Mintlify CLI was briefly exposed to a supply chain attack. Learn what happened, who was affected, and what actions to take. Resolved in 6 hours.