Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2025-54313 — HIGH severity vulnerability | Release Alert

CVE-2025-54313

7.5

HIGHCVSS v3

Published

July 19, 2025

Affected

12 projects

Assigned by

MITRE

Severity scale

010

Description

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

eslint-plugin-prettier

NPMRuns prettier as an eslint rule

= 4.2.2, = 4.2.3, >= 4.2.2, < 4.2.4NVD

eslint-config-prettier

NPMTurns off all rules that are unnecessary or might conflict with Prettier.

= 8.10.1, = 9.1.1, = 10.1.6, = 10.1.7, >= 8.10.1, < 8.10.2, >= 9.1.1, < 9.1.2, >= 10.1.6, < 10.1.8NVD

prettier/eslint-plugin-prettier

More on this CVE

NVD↗GitHub Advisory↗

GitHubESLint plugin for Prettier formatting

= 4.2.2, = 4.2.3, >= 4.2.2, < 4.2.4NVD

prettier/eslint-config-prettier

GitHubTurns off all rules that are unnecessary or might conflict with Prettier.

= 8.10.1, = 9.1.1, = 10.1.6, = 10.1.7, >= 8.10.1, < 8.10.2, >= 9.1.1, < 9.1.2, >= 10.1.6, < 10.1.8NVD

@types/eslint-plugin-prettier

NPMTypeScript definitions for eslint-plugin-prettier

= 4.2.2, = 4.2.3, >= 4.2.2, < 4.2.4NVD

synckit

NPMPerform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.

= 0.11.9, >= 0.11.9, < 0.11.10OSV

@sxzz/eslint-config-prettier

NPMPrettier Config

= 8.10.1, = 9.1.1, = 10.1.6, = 10.1.7, >= 8.10.1, < 8.10.2, >= 9.1.1, < 9.1.2, >= 10.1.6, < 10.1.8NVD

un-ts/synckit

GitHubPerform async work synchronously in Node.js/Bun using `worker_threads` with first-class TypeScript and Yarn P'n'P support.

= 0.11.9, >= 0.11.9, < 0.11.10NVD

@vue/eslint-config-prettier

NPMeslint-config-prettier for create-vue

= 8.10.1, = 9.1.1, = 10.1.6, = 10.1.7, >= 8.10.1, < 8.10.2, >= 9.1.1, < 9.1.2, >= 10.1.6, < 10.1.8NVD

vuejs/eslint-config-prettier

GitHub`eslint-config-prettier` for `create-vue` setups

= 8.10.1, = 9.1.1, = 10.1.6, = 10.1.7, >= 8.10.1, < 8.10.2, >= 9.1.1, < 9.1.2, >= 10.1.6, < 10.1.8NVD

ajnart/homarr

GitHubCustomizable browser's home page to interact with your homeserver's Docker containers (e.g. Sonarr/Radarr)

>= 1.29.0, < 1.30.0NVD

homarr-labs/homarr

GitHubA modern and easy to use dashboard. 40+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

>= 1.29.0, < 1.30.0NVD