EUVD-2025-178531

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...

EUVD-2025-113898

Malicious code in eslint-config-thuban-repository-hexo npm...

EUVD-2025-111815

Malicious code in leda-tethys-webdriver-manager-hexo npm...

@dpu/hexo-github-include (>=0.0.1 <=0.0.2), @exabugs/hexo-theme-icarus (=5.1.0) +114 more potentially affected by CVE-2023-39584 via hexo (>=2.4.5 <=7.0.0)

hexo NPM version =2.4.5, =0.0.1, =1.0.0, =1.4.0, =1.0.2, =22.8.141, =1.0.0, =1.0.0, =1.0.11, =1.0.16, =1.0.17 - diangua-test-hexo-site =0.0.0 and more Source cves: CVE-2023-39584 Source advisory: OSV:GHSA-X2JC-989C-47Q4...