corpus.blog
43,771 blogs · 5,580,801 posts Claim your blog
Record · corpus.blog/posts/01a0fab3-de58-7274-81b7-b4a84632b0a5

eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malware

safedep.io · published 21 July 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at safedep.io Wayback capture
1blogs citing
First cited
23 Sept 2025
Most recent
23 Sept 2025
Rank this month
not ranked
External links
14
Words captured
5,372

Cited by

Blog
In the post
Date
Red Canary
Node problem: Tracking recent npm package compromises Read at the source ↗
23 Sept 2025

Links from this post

Link
Host
https://x.com/JounQin/status/1946297662069993690
x.com
https://www.linkedin.com/in/kylek42/
linkedin.com
https://github.com/safedep/vet
github.com
https://github.com/safedep/pmg
github.com
https://nvd.nist.gov/vuln/detail/CVE-2025-54313
nvd.nist.gov
https://github.com/dasa
github.com
https://github.com/prettier/eslint-config-prettier/issues/339
github.com
https://github.com/prettier/eslint-config-prettier
github.com
https://malpedia.caad.fkie.fraunhofer.de/details/win.scavenger
malpedia.caad.fkie.fraunhofer.de
https://github.com/safedep/vet-action
github.com
https://github.com/safedep/vet/blob/main/docs/mcp.md
github.com
https://code.visualstudio.com/docs/copilot/setup
code.visualstudio.com
https://invokere.com/posts/2025/07/scavenger-malware-distributed-via-eslint-config-prettier-npm-package-supply-chain-compromise/
invokere.com
https://c-b.io/2025-07-20+-+Install+Linters%2C+Get+Malware+-+DevSecOps+Speedrun+Edition
c-b.io
Elsewhere on safedep.io (2)