CVE-2025-54313 PoC — eslint-config-prettier 安全漏洞

Source

Associated Vulnerability

Description

Checks projects for compromised packages, suspicious files, and import statements.

Readme

# cve-2025-54313
Checks projects for compromised packages, suspicious files, and import statements, see [is Supply Chain attack](https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack)

## How?

Just execute the script in the terminal/console. Consider to install `maple` first.

```sh
npm install -g maple
chmod +x cve-2025-54313.sh
./cve-2025-54313.sh
```

![](cve-2025-54313.png)

## License

GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007

Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed. See [LICENSE](./LICENSE)
for details.

File Snapshot

 [4.0K]  /data/pocs/f4109e320816c55c7d09fbf46a37b51326857911
├── [199K]  cve-2025-54313.png
├── [9.2K]  cve-2025-54313.sh
├── [ 34K]  LICENSE
└── [ 700]  README.md

0 directories, 4 files

Remarks