{"schema":"threatline.record/2","record":{"id":"CVE-2025-54313","aliases":[],"summary":"Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","details":"Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.","categories":["Unclassified"],"product":"eslint-config-prettier","vendor":"Prettier","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-54313","source_modified_at":"2026-02-26T17:50:26.767Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"eslint-config-prettier","vendor":"prettier","versions":[{"status":"affected","version":"8.10.1","versionType":"semver"},{"status":"affected","version":"9.1.1","versionType":"semver"},{"status":"affected","version":"10.1.6","versionType":"semver"},{"status":"affected","version":"10.1.7","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":7.5,"severity":"High","kev":{"listed":true,"date_added":"2026-01-22","due_date":"2026-02-12","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.05125,"percentile":0.92366,"score_date":"2026-10-23"},"published_at":"2025-07-19T00:00:00.000Z","modified_at":"2026-02-26T17:50:26.767Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2025-54313","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-02-26T17:50:26.767Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2025-54313","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"url":"https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490","source":"CISA KEV"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54313","source":"CISA KEV"},{"source":"CVE List","url":"https://socket.dev/blog/npm-phishing-campaign-leads-to-prettier-tooling-packages-compromise"},{"source":"CVE List","url":"https://www.bleepingcomputer.com/news/security/popular-npm-linter-packages-hijacked-via-phishing-to-drop-malware/","tags":["exploit"]},{"source":"CVE List","url":"https://github.com/prettier/eslint-config-prettier/issues/339"},{"source":"CVE List","url":"https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions"},{"source":"CVE List","url":"https://www.stepsecurity.io/blog/supply-chain-security-alert-eslint-config-prettier-package-shows-signs-of-compromise"},{"source":"CVE List","url":"https://news.ycombinator.com/item?id=44609732"},{"source":"CVE List","url":"https://news.ycombinator.com/item?id=44608811"},{"source":"CVE List","url":"https://github.com/community-scripts/ProxmoxVE/discussions/6115"},{"source":"CVE List","url":"https://www.endorlabs.com/learn/cve-2025-54313-eslint-config-prettier-compromise----high-severity-but-windows-only"},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54313","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"partial","assessed_at":"2026-01-23T04:55:19.677903Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-02-26T17:50:26.767Z","content_hash":"f3ba4bca53366886930a6331613ce59849846224088b17f927316fcdf9ff3a59"}}