The main question is who actually downloaded the phoenix miner from the unofficial sources and then included it in their nicehash software package for everyone to download? Answer: nicehash employees

So don't blame the Phoenix now as he is not here to defend himself. So far it has proven to be stable software so I'll keep using it myself.
Also, there is no proof it is malicious so I'd advise nicehash against spreading the fud based on a single fact that it was removed from Mega. Claymore was also removed from Mega and no one panicked about it.
I know they're working on their excavator and they don't need/want phoenix anymore, but that's not the way to handle such transition. Very unprofessional, classic nicehash.