{"id":86652,"date":"2026-03-10T09:49:51","date_gmt":"2026-03-10T09:49:51","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-54313-malicious-code-execution-via-eslint-config-prettier-package","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-54313-malicious-code-execution-via-eslint-config-prettier-package\/","title":{"rendered":"CVE-2025-54313: Malicious Code Execution via eslint-config-prettier Package<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The vulnerability CVE-2025-54313 primarily affects developers using certain versions of the eslint-config-prettier package. This vulnerability is of significant concern due to the potential for system compromise or data leakage upon execution of maliciously embedded code within the package.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-54313
\nSeverity: High (CVSS: 7.5)
\nAttack Vector: Local
\nPrivileges Required: User
\nUser Interaction: Required
\nImpact: System compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

eslint-config-prettier | 8.10.1, 9.1.1, 10.1.6, 10.1.7<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit is embedded within the eslint-config-prettier package, specifically within the versions mentioned above. Upon installation of the affected package, an install.js file is executed, which launches the node-gyp.dll malware on Windows systems. This malware, once active, can lead to potential system compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

The following is a
\nconceptual<\/strong>
\n example of how the vulnerability might be exploited:<\/p>\n

# Assume the user is installing a vulnerable version of the package\nnpm install eslint-config-prettier@8.10.1\n# The install.js file is automatically executed\n# Within install.js, the malicious code is triggered\nnode .\/node_modules\/eslint-config-prettier\/install.js\n# The node-gyp.dll malware is launched<\/code><\/pre>\n
Please note that this is a simplified representation of the potential exploit. Actual attack scenarios might be more complex and require additional steps or conditions.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The vulnerability CVE-2025-54313 primarily affects developers using certain versions of the eslint-config-prettier package. This vulnerability is of significant concern due to the potential for system compromise or data leakage upon execution of maliciously embedded code within the package. Vulnerability Summary CVE ID: CVE-2025-54313 Severity: High (CVSS: 7.5) Attack Vector: Local Privileges Required: User User […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86652","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t