phx-core

MAL-2025-192572

npmmalware12/15/2025
Description

Malicious code in phx-core (npm)

Indicators of Compromise
SHA256 Hashes (3)
44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d
6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d
63cd1ecc7692e70c4d6562c00fdd5f873108d1419ed77312b9fc9d62997e3b87
References (3)
https://github.com/advisories/GHSA-jfqw-pq2x-x7rgOSVhttps://security.snyk.io/vuln/SNYK-JS-PHXCORE-14417293OSVhttps://npmjs.com/package/phx-coreOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/15/2025
Aliases
GHSA-jfqw-pq2x-x7rgSNYK-JS-PHXCORE-14417293
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001