| ID | CVE-2025-54313 | ||||||
| Sažetak | eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N | ||||||
| Zadnje važnije ažuriranje | 19-07-2025 - 17:15 | ||||||
| Objavljeno | 19-07-2025 - 17:15 |
