ESLint
Security incidents tagged ESLint. Newest first.
0 ESLint incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 457
- Longest quiet run: 457 days (Jul 23–Oct 22)
Show 1 older incident1 older incident
July 2025 1
Higheslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313)Patched
npm: eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall, is Patched
A maintainer was phished through the typosquat domain npnjs.com. The attacker published malicious eslint-config-prettier versions whose install script ran node-gyp.dll on Windows, dropping the Scavenger infostealer. eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall and later the 'is' package were also hit.
Open incident →CVE-2025-54313
