Vulnerability intelligence npm

eslint-config-prettier

Turns off all rules that are unnecessary or might conflict with Prettier.

npm latest 10.1.8 MIT

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

10.1.8

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-f29h-pxvx-f335 high CISA KEV

eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

Affected range

SEMVER: introduced 8.10.1; fixed 8.10.2SEMVER: introduced 9.1.1; fixed 9.1.2SEMVER: introduced 10.1.6; fixed 10.1.8

Fixed versions: 8.10.2, 9.1.2, 10.1.8

CVE-2025-54313 Source ↗Source ↗