MSRXMSRXSecurity
Vendors / Prettier

Prettier vulnerabilities being exploited

1 Prettier flaw was confirmed exploited in the wild in the past 365 days, across 1 product: eslint-config-prettier. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-01-22CVE-2025-54313 eslint-config-prettier
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

2026-02-12
Watch my Prettier softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.30 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.