Listen to this Post
How the CVE Works
The affected versions of `eslint-config-prettier` (8.10.1, 9.1.1, 10.1.6, 10.1.7) and related packages contain malicious code in their installation scripts. When installed, the package executes install.js, which triggers the download and execution of node-gyp.dll, a known malware payload on Windows systems. This supply chain attack leverages the trust in npm package dependencies to distribute malicious code, compromising systems during the installation process.
DailyCVE Form
Platform: npm
Version: 8.10.1, 9.1.1, 10.1.6, 10.1.7
Vulnerability: Malicious Code Execution
Severity: High
Date: Jul 19, 2025
Prediction: Patch expected by Jul 28, 2025
What Undercode Say
Analytics:
npm audit npm ls eslint-config-prettier grep -r "install.js" node_modules/
Exploit:
require('eslint-config-prettier/install.js');
Protection from this CVE:
npm uninstall eslint-config-prettier npm install --ignore-scripts
Impact:
System compromise via malware (`node-gyp.dll`).
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
