eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313) ยท updates https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313 A maintainer was phished through the typosquat domain npnjs.com. The attacker published malicious eslint-config-prettier versions whose install script ran node-gyp.dll on Windows, dropping the Scavenger infostealer. eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall and later the 'is' package were also hit. en Tue, 22 Jul 2025 00:00:00 GMT eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313): Malicious 'is' package versions found in the same campaign https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313 https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313#2025-07-22-d7e9eaa4 Tue, 22 Jul 2025 00:00:00 GMT high <p><a href="https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack">Source</a></p> eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313): Malicious eslint-config-prettier versions published after maintainer phishing https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313 https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313#2025-07-18-6f442e33 Fri, 18 Jul 2025 00:00:00 GMT high <p><a href="https://www.cve.org/CVERecord?id=CVE-2025-54313">Source</a></p>