Description
Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| eslint-config-prettier | prettier / eslint-config-prettier | 10.1.6 | affected |
| eslint-config-prettier | prettier / eslint-config-prettier | 10.1.7 | affected |
| eslint-config-prettier | prettier / eslint-config-prettier | 8.10.1 | affected |
| eslint-config-prettier | prettier / eslint-config-prettier | 9.1.1 | affected |