In CISA KEV7.5 HighCWE-506
CVE-2025-54313
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Prettiereslint-config-prettier
Status
- Exploited in the wild
- In CISA KEV since 22 Jan
Federal deadlineThu 12 Feb, 23:59 UTC
Passed 254 days ago
CISA KEV · added 22 Jan
Exploit probabilityEPSSchecked 25 Oct
5.1%probability of exploitation in the next 30 days
Higher than 92% of scored CVEs
SeverityCVSS
7.5High
Description NVD
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 23 Jan · 10:16 UTC | SecurityOnline | CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge |
| Fri 23 Jan · 12:26 UTC | Security Affairs | U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog |
| Fri 23 Jan · 15:51 UTC | The Hacker News | CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities |
- CISA Updates KEV Catalog with Four Actively Exploited Software VulnerabilitiesThe Hacker News · mentions it in passing
- U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform, and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs · mentions it in passing
- CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits SurgeSecurityOnline · first in our coverage · mentions it in passing