Skip to content
OpenAdvisories

Package · npm

discord.js-user

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-69r6-7h4f-9p7q

    Malicious Package in discord.js-user

    All versions of `discord.js-user` contain malicious code. The package uploads the user's Discord token to a remote server. ## Recommendation Remove the package from your environment. Ensure any compromised tokens are invalidated.

    discord.js-user npm