836 matches found
Malicious code in prettier-lightyear-markdown-hapi (npm)
The package prettier-lightyear-markdown-hapi was found to contain malicious code...
Malicious code in playwright-prettier-archaeoastronomy-thuban (npm)
The package playwright-prettier-archaeoastronomy-thuban was found to contain malicious code...
Malicious code in gridsome-orogeny-prettier-plugin-markdown-asteroid (npm)
The package gridsome-orogeny-prettier-plugin-markdown-asteroid was found to contain malicious code...
Malicious code in prettier-callisto-superflare-mui (npm)
The package prettier-callisto-superflare-mui was found to contain malicious code...
Malicious code in prettier-rocket-sociobiology-luna (npm)
The package prettier-rocket-sociobiology-luna was found to contain malicious code...
MAL-2025-29620 Malicious code in prettier-achernar-google-colors (npm)
The package prettier-achernar-google-colors was found to contain malicious code...
MAL-2025-37409 Malicious code in typescript-airbnb-prettier (npm)
The package typescript-airbnb-prettier was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 48f36cae7e37d50a38823a30da2b911772c39391c9e15f5aecd255fc8cb37561 This package installs a dependency hosted on a custom domain...
MAL-2025-9584 Malicious code in @typescript_eslinter/prettier (npm)
The package @typescripteslinter/prettier was found to contain malicious code...
MAL-2025-39465 Malicious code in wormhole-steganography-prettier-eclipse (npm)
The package wormhole-steganography-prettier-eclipse was found to contain malicious code...
CVE-2025-8263
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-8263
CVE-2025-8263 is rejected/not active and does not represent a security vulnerability.
PT-2025-31054 · Prettier · Prettier
Name of the Vulnerable Software and Affected Versions: prettier versions up to 3.6.2 Description: A vulnerability exists in prettier due to inefficient regular expression complexity within the parseNestedCSS function of the src/language-css/parser-postcss.js file. The manipulation of the node...
Number withdrawal
prettier is a code formatting tool from Prettier Open Source. This CVE number has been withdrawn...
Fake npm Website Used to Push Malware via Stolen Token
Fake npm website used in phishing attack to steal maintainer token, leading to malware in popular JavaScript packages like eslint-config-prettier...
MAL-2025-6023 Malicious code in eslint-plugin-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
Malicious code in eslint-config-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
Malicious code in eslint-plugin-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
MAL-2025-6022 Malicious code in eslint-config-prettier (npm)
This package installs a windows based malware file node-gyp.dll via install.js...
CVE-2025-54313
A flaw was found in eslint-config-prettier. An affected version contains embedded malicious code that executes an install.js file during package installation. This script launches the node-gyp.dll malware on Windows systems, allowing a remote attacker to execute arbitrary code. Mitigation...