https://pwn.watch/t/eslint Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 22 Jul 2025 00:00:00 GMT https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313 https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313 Tue, 22 Jul 2025 00:00:00 GMT high <p>A maintainer was phished through the typosquat domain npnjs.com. The attacker published malicious eslint-config-prettier versions whose install script ran node-gyp.dll on Windows, dropping the Scavenger infostealer. eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall and later the 'is' package were also hit.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> Malicious versions removed; use other eslint-config-prettier versions (see CVE record)</p> <p><strong>Latest updates:</strong></p><ul><li>2025-07-22: Malicious 'is' package versions found in the same campaign (<a href="https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack">source</a>)</li><li>2025-07-18: Malicious eslint-config-prettier versions published after maintainer phishing (<a href="https://www.cve.org/CVERecord?id=CVE-2025-54313">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2025-54313</p>