NA
Product
Napi-postinstall
On CISA KEVExploited in the wild
1
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
VulnerabilityHigh
[CISA KEV] CVE-2025-54313: Prettier eslint-config-prettier - Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
ESeslint-config-prettierCVE-2025-54313
Jan 22, 2026·CISA KEV
