Pkgr/core vulnerabilities
1 known vulnerability in Pkgr/core from Un-ts. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
1exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Prettier eslint-config-prettier Embedded Malicious Code Exploited
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.