Skip to content

PatchFirst · Latest vulnerabilities

@pkgr/core vulnerabilities

Vulnerabilities published for @pkgr/core in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2025-54313
High · CVSS 7.5EPSS 5.12%In KEVFix available
CVE-2025-54313
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
@pkgr/core Node.js
- Update to 0.2.9
Published July 19, 2025Updated February 26, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →