MAL-2025-6023

    Dashboard / Malicious Package / MAL-2025-6023

    MAL-2025-6023

    Published: 21 Jul 2025Last Modified: 21 Jul 2025

    Summary: Malicious code in eslint-plugin-prettier (npm)

    Details: This package installs a windows based malware file node-gyp.dll via install.js

    References: https://www.bleepingcomputer.com/news/security/popular-npm-linter-packages-hijacked-via-phishing-to-drop-malware/

    Affected packages

    Package

    Name: eslint-plugin-prettier

    Purl: pkg:npm/eslint-plugin-prettier

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    4.2.2
    4.2.3
    MAL-2025-6023 | CVE-DB