phobia

PHOBIA v1.0.0 All-in-one network attack framework. Wide TUI,...

MAL-2025-29132 Malicious code in phobia (npm)

The package phobia was found to contain malicious code...

Malicious code in phobia (npm)

The package phobia was found to contain malicious code...

OS Command Injection in adrieankhisbe/bundle-phobia-cli

Description BundlePhobia is a tool to help you find the cost of adding a npm package to your bundle. It enables you to query package sizes. The npm-utils.js has a unsanitized exec function which leads to Arbitrary code execution Proof-of-concept const util = require'./npm-utils.js'; let a =...