EUVD-2025-21972

Malicious code in bioql PyPI...

Embedded Malicious Code

eslint-config-prettier is vulnerable to Embedded Malicious Code. The vulnerability is due to embedded malicious code caused by a compromised install.js script which executes node-gyp.dll malware on Windows during installation...

SUSE CVE-2025-54313

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

MAL-2025-6022 Malicious code in eslint-config-prettier (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

MAL-2025-6024 Malicious code in got-fetch (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

MAL-2025-6021 Malicious code in @pkgr/core (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

MAL-2025-6026 Malicious code in synckit (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

CVE-2025-54313

A flaw was found in eslint-config-prettier. An affected version contains embedded malicious code that executes an install.js file during package installation. This script launches the node-gyp.dll malware on Windows systems, allowing a remote attacker to execute arbitrary code. Mitigation...

eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows...

PT-2025-30145

Name of the Vulnerable Software and Affected Versions eslint-config-prettier versions 8.10.1 through 10.1.7 Description The eslint-config-prettier npm package was compromised through a supply chain attack resulting from a phishing attack on maintainers. Installation of affected versions executes ...