MEIFP – Most Exploited Internet-Facing Products

prettier

Products: eslint-config-prettier

26.0

Score

CVEs

Active

PoC

KEV

#110

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-54313	2025-07-19	7.5v3.1	ACTIVE		High	None	no	26.0	eslint-config-prettier	eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3