Malware in discord-mfa-solver

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview discord-mfa-solver is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the...

Malicious code in discord-mfa-solver (npm)

Source: amazon-inspector a91086c84ad0836c4b32ee5db890c9a6d9543f00e9dd31d18aed8a6acc9bdb3e On require of the package, lib/cache.js reached from index.js executes trymodule'require'catch — a bracket-notation, error-swallowed dynamic require of the declared dependency node-net-pool ^1.0.0 in...

MAL-2026-16101 Malicious code in mfaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c278e0ee3820cf701ef7ad65dfdab43a0765e5d3423286de99d3301fe39a8455 The package presents itself as a Discord MFA helper, but its cache module contains a warmSession routine that decodes a base64-encoded string CDNBASE...

Malicious code in discord-mfa-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91086c84ad0836c4b32ee5db890c9a6d9543f00e9dd31d18aed8a6acc9bdb3e On require of the package, lib/cache.js reached from index.js executes trymodule'require'catch — a bracket-notation, error-swallowed dynamic require ...

MAL-2026-16100 Malicious code in discord-mfa-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91086c84ad0836c4b32ee5db890c9a6d9543f00e9dd31d18aed8a6acc9bdb3e On require of the package, lib/cache.js reached from index.js executes trymodule'require'catch — a bracket-notation, error-swallowed dynamic require ...

Malicious Package

Overview discord-mfa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in discord-mfa (npm)

Source: amazon-inspector cb4ed3f4fab9ec795405127517bce22b0aad8277ba7db65a563d311660334760 On require'discord-mfa', index.js loads lib/cache.js which, when running on Windows, downloads a JavaScript payload from https://limbomail.com/api/attachment/rEa6rTkGfT.o7nh0aBVvDQWmOG47NPBQ3pUjduHeiw to...

Malicious code in discord-mfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4ed3f4fab9ec795405127517bce22b0aad8277ba7db65a563d311660334760 On require'discord-mfa', index.js loads lib/cache.js which, when running on Windows, downloads a JavaScript payload from...

MAL-2026-15552 Malicious code in discord-mfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4ed3f4fab9ec795405127517bce22b0aad8277ba7db65a563d311660334760 On require'discord-mfa', index.js loads lib/cache.js which, when running on Windows, downloads a JavaScript payload from...

MAL-2026-15558 Malicious code in mfakit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11dc9d39df6906a4b784b0cb3a584b5307816d20c4cc04fb28bbb40f59c3fb8 The package advertises itself as a lightweight Discord MFA library, but require of its main entry loads lib/cache.js which schedules a setImmediate...