phobia

PHOBIA v1.0.0 All-in-one network attack framework. Wide TUI,...

Malicious code in phobia (npm)

The package phobia was found to contain malicious code...

MAL-2025-29132 Malicious code in phobia (npm)

The package phobia was found to contain malicious code...

OS Command Injection in adrieankhisbe/bundle-phobia-cli

Description BundlePhobia is a tool to help you find the cost of adding a npm package to your bundle. It enables you to query package sizes. The npm-utils.js has a unsanitized exec function which leads to Arbitrary code execution Proof-of-concept const util = require'./npm-utils.js'; let a =...