Skip to content
OpenAdvisories
High · 7.3 CVE-2017-16207 EUVD-2018-0398GHSA-fv9m-f7w4-889c

discordi.js is malware

Published Jun 7, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: HackerOne Product: discordi.js node module Package: discordi.js Ecosystem: npm

Description

discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin.

Affected products

VendorProductAffectedFixed
HackerOne discordi.js node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm discordi.js <= 14.0.3 — GHSA-fv9m-f7w4-889c

References