Malicious versions reported for this package
- MAL-2025-20242 — all versions · Aug 14, 2025
1 result · Feed
-
Critical 9.8
Malicious Package in fast-requests
All versions of `fast-requests` contain obfuscated malware that uploads Discord user tokens to a remote server. This allows attackers to make purchases on behalf of users if they have credit cards linked to their Discord accounts. ## Recommendation Remove the…