637 matches found
MAL-2025-29627 Malicious code in prettier-plugin-markdown-cz-conventional-changelog-aquarius-mira (npm)
The package prettier-plugin-markdown-cz-conventional-changelog-aquarius-mira was found to contain malicious code...
Malicious code in passport-pino-pretty-prettier-stylelint-planetology (npm)
The package passport-pino-pretty-prettier-stylelint-planetology was found to contain malicious code...
Malicious code in gridsome-orogeny-prettier-plugin-markdown-asteroid (npm)
The package gridsome-orogeny-prettier-plugin-markdown-asteroid was found to contain malicious code...
MAL-2025-34012 Malicious code in stratigraphy-changelog-prettier-stylelint-sqlite (npm)
The package stratigraphy-changelog-prettier-stylelint-sqlite was found to contain malicious code...
MAL-2025-28863 Malicious code in parallax-writable-prettier-stylelint-hawkingradiation (npm)
The package parallax-writable-prettier-stylelint-hawkingradiation was found to contain malicious code...
CVE-2025-8263
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-8263
CVE-2025-8263 is rejected/not active and does not represent a security vulnerability.
PT-2025-31054 · Prettier · Prettier
Name of the Vulnerable Software and Affected Versions: prettier versions up to 3.6.2 Description: A vulnerability exists in prettier due to inefficient regular expression complexity within the parseNestedCSS function of the src/language-css/parser-postcss.js file. The manipulation of the node...
编号撤回
prettier is a code formatting tool from Prettier Open Source. This CVE number has been withdrawn...
Fake npm Website Used to Push Malware via Stolen Token
Fake npm website used in phishing attack to steal maintainer token, leading to malware in popular JavaScript packages like eslint-config-prettier...
Malicious code in eslint-plugin-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
Malicious code in eslint-config-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
MAL-2025-6023 Malicious code in eslint-plugin-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
MAL-2025-6022 Malicious code in eslint-config-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
CVE-2025-54313
A flaw was found in eslint-config-prettier. An affected version contains embedded malicious code that executes an install.js file during package installation. This script launches the node-gyp.dll malware on Windows systems, allowing a remote attacker to execute arbitrary code. Mitigation...
GHSA-F29H-PXVX-F335 eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...
CVE-2025-54313
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...
VulnCheck KEV: CVE-2025-54313
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...
eslint-config-prettier 安全漏洞
eslint-config-prettier is a Prettier open source application. A security vulnerability exists in eslint-config-prettier version 8.10.1, 9.1.1, 10.1.6, and 10.1.7, which stems from embedded malicious code that could lead to a supply chain attack...