npm · Malicious package advisory
Malware@phonos/types
MAL-2026-2409
Malicious code in @phonos/types (npm)
Details
Multiple evidences indicate malicious behavior: obfuscation, suspicious install script, access to sensitive functionalities, and untrustworthy source. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e8c10ea271203f85e595559214b08565cef54710fcc605eca02483606041cf51) The package @phonos/types was found to contain malicious code.