HIGH CISA KEV

CVE-2025-54313

CVSS v3

7.5

HIGH

EPSS Score

11.6%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

CISA Known Exploited Vulnerability

Date Added
1/22/2026
Patch Due Date
2/12/2026
Ransomware Use
Unknown

Technical details

CVSS v3 Vector
3.1
Published
7/19/2025
Last Modified
1/23/2026

Frequently asked questions

What is CVE-2025-54313?

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

Is CVE-2025-54313 actively exploited?

Yes. CVE-2025-54313 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 2/12/2026.

What is the CVSS score for CVE-2025-54313?

CVE-2025-54313 has a CVSS v3 base score of 7.5 (HIGH severity), with vector string 3.1.

Is CVE-2025-54313 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.