Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/07/19 6:30 p.m.10 views

eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

7.5CVSS7.3AI score0.04146EPSS
SaveExploits2References19Affected Software6
Rows per page
Query Builder