CVE-2025-54313 PoC — eslint-config-prettier 安全漏洞

Description

Checks projects for compromised packages, suspicious files, and import statements.

介绍

# cve-2025-54313
Checks projects for compromised packages, suspicious files, and import statements, see [is Supply Chain attack](https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack)

## How?

Just execute the script in the terminal/console. Consider to install `maple` first.

```sh
npm install -g maple
chmod +x cve-2025-54313.sh
./cve-2025-54313.sh
```

![](cve-2025-54313.png)

## License

GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007

Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed. See [LICENSE](./LICENSE)
for details.

文件快照

备注