Malicious code in carloprojectdiscord (npm)

The package carloprojectdiscord was found to contain malicious code...

MAL-2025-16556 Malicious code in carloprojectdiscord (npm)

The package carloprojectdiscord was found to contain malicious code...

GHSA-9RWJ-8MH9-4876 Malicious Package in carloprojectdiscord

All versions of carloprojectdiscord contain obfuscated malware that uploads Discord user tokens to a remote server. This allows attackers to make purchases on behalf of users if they have credit cards linked to their Discord accounts. Recommendation Remove the package from your environment. Revie...