npm

eslint-config-prettier

eslint-config-prettier is identified in the SafeDep analysis "eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malware". A supply chain attack exploiting eslint-config-prettier and other popular npm packages were discovered with major supply chain impact. In this blog, we will explore the details of the hack and the impact it had on the npm ecosystem.

discovered 2025-07-21

Threat types

other

Malicious versions

  • 8.10.1
  • 9.1.1
  • 10.1.6
  • 10.1.7

Campaigns

Indicators

Techniques

Read the full analysis →