Malicious Package

Overview hexo-publish-hexo-xo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-178527

Malicious code in hexo-publish-hexo-xo npm...