CVE-2025-54313

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2026-01-22

Reference

https://nvd.nist.gov/vuln/detail/CVE-2025-54313

⌖ exploited in the wild shame 50/100 exploited-in-wild

Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

Players implicated

Prettier · vendor eslint-config-prettier · product

Description

Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.