CVE-2025-54313

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

CVE-2025-54313

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

VulnCheck KEV: CVE-2025-54313

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +896 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...

MAL-2025-5848 Malicious code in eslint-config-ivy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e1af1d02505f4566c424f21a111d21aab14a0af46e04316c0c84bd47c35a777 The OpenSSF Package Analysis project identified 'eslint-config-ivy' @ 99.99.992 npm as malicious. It is considered malicious because: - The...

Malicious code in eslint-config-ivy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e1af1d02505f4566c424f21a111d21aab14a0af46e04316c0c84bd47c35a777 The OpenSSF Package Analysis project identified 'eslint-config-ivy' @ 99.99.992 npm as malicious. It is considered malicious because: - The...

MAL-2025-5835 Malicious code in @lensapp/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61bc10b6edfec3225d467f169ee0c13a8d66637e96186f959196d0ae15822ad6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lensapp/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61bc10b6edfec3225d467f169ee0c13a8d66637e96186f959196d0ae15822ad6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shadowmonarchx/eslint_plugin_react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a575ed67cd813fc81aec32ae29e2e8672e85158eebc9e3a07face9ed576247 Any computer that has this package installed or running should be considered...

MAL-2025-5795 Malicious code in sentry-eslint-config-internal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ba8b7f921d459f28baff326f2eb32b49ed229eb7e2d551526035c8fcb2b420 Any computer that has this package installed or running should be considered...

MAL-2025-5553 Malicious code in eslint-plugin-vhtml-slptypography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c2dc490463e3766704c773cd700c70323c52566cd3658a9acbdf5273f06655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-vhtml-slptypography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c2dc490463e3766704c773cd700c70323c52566cd3658a9acbdf5273f06655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5280 Malicious code in eslint-plugin-gpuweb-cts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f89e00c1a962e9633dd4aec668c01f211d133f98f097a23064f4d3a4f0f9bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-gpuweb-cts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f89e00c1a962e9633dd4aec668c01f211d133f98f097a23064f4d3a4f0f9bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5079 Malicious code in eslint-plugin-facebook (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-plugin-facebook (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4999 Malicious code in eslint-plugin-panel-ops (npm)

Malware: Executes code on install, exfiltrates data via DNS to a suspicious domain. Contains a preinstall script and phone-home behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1ea7508e63005e73356cfdb457f0050ebb7ae1f04cb319592c30a140c4e2f2 Any computer th...

MAL-2025-4827 Malicious code in eslint-parser-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e78236f48c6c57e51a72f8df6807df4f6d5c0a5b386814bfc0ca2d0b81bd82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-parser-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e78236f48c6c57e51a72f8df6807df4f6d5c0a5b386814bfc0ca2d0b81bd82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990c333445462efa33b1726d3ff2b0b14a86a3c474eb5f2564f583456e64cb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...