MAL-2025-22508 Malicious code in holography-ganymede-proxima-hexo (npm)

The package holography-ganymede-proxima-hexo was found to contain malicious code...

MAL-2025-22412 Malicious code in hexo-cluster-steganography-jsonp (npm)

The package hexo-cluster-steganography-jsonp was found to contain malicious code...

Malicious code in holography-ganymede-proxima-hexo (npm)

The package holography-ganymede-proxima-hexo was found to contain malicious code...

Malicious code in spectroscopy-mira-loopback-hexo (npm)

The package spectroscopy-mira-loopback-hexo was found to contain malicious code...

Malicious code in singularitarianism-puppeteer-ganymede-hexo (npm)

The package singularitarianism-puppeteer-ganymede-hexo was found to contain malicious code...

MAL-2025-25658 Malicious code in luminescence-hexo-firebase-kuiperbelt (npm)

The package luminescence-hexo-firebase-kuiperbelt was found to contain malicious code...

MAL-2025-27139 Malicious code in nconf-ariel-vuepress-hexo (npm)

The package nconf-ariel-vuepress-hexo was found to contain malicious code...

MAL-2025-28672 Malicious code in paleoecology-carpo-relay-hexo (npm)

The package paleoecology-carpo-relay-hexo was found to contain malicious code...

MAL-2025-39097 Malicious code in wezen-rimraf-markdown-hexo (npm)

The package wezen-rimraf-markdown-hexo was found to contain malicious code...

MAL-2025-33293 Malicious code in singularitarianism-puppeteer-ganymede-hexo (npm)

The package singularitarianism-puppeteer-ganymede-hexo was found to contain malicious code...

MAL-2025-33729 Malicious code in spectroscopy-mira-loopback-hexo (npm)

The package spectroscopy-mira-loopback-hexo was found to contain malicious code...

MAL-2025-14187 Malicious code in airbnb-cryovolcano-steganography-hexo (npm)

The package airbnb-cryovolcano-steganography-hexo was found to contain malicious code...

MAL-2025-22414 Malicious code in hexo-iota-betelgeuse-development (npm)

The package hexo-iota-betelgeuse-development was found to contain malicious code...

MAL-2025-37895 Malicious code in update-hexo-epigenetics-geomorphology (npm)

The package update-hexo-epigenetics-geomorphology was found to contain malicious code...

CVE-2024-25865

Cross Site Scripting XSS vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote attackers to execute arbitrary code via the algolia search function...

CVE-2023-47435

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages...

CVE-2025-5010

A vulnerability classified as problematic has been found in moonlightL hexo-boot 4.3.0. This affects an unknown part of the file /admin/home/index.html of the component Blog Backend. The manipulation of the argument Description leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5011

A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0. This vulnerability affects unknown code of the file /admin/home/index.html of the component Dynamic List Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has...

CVE-2021-25987

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code...

CVE-2019-17606

The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post...