CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-07-19
eslint-config-prettier Supply Chain Compromise and Malware Execution Vulnerability (CVE-2025-54313)
[Affected Scope] Windows development and build environments utilizing eslint-config-prettier package versions 8.10.1, 9.1.1, 10.1.6, and 10.1.7
[Impact] Installation of the compromised package triggers automatic execution of install.js, dropping and executing the node-gyp.dll malware to compromise the host system
[Mitigation] Immediately uninstall the compromised versions, force-downgrade or upgrade to a clean version, and scan systems for malicious DLL files